https://exploit-radar.com/en/flux/marques/progress.xml Exploit Radar: exploited Progress vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for Progress products. 2026-08-07T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-8037/ CVE-2026-8037 — Progress Kemp LoadMaster 2026-08-07T00:00:00Z Apply the patches or mitigations from Progress; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 7, 2026. https://exploit-radar.com/en/cve/CVE-2024-4885/ CVE-2024-4885 — Progress WhatsUp Gold 2025-03-03T00:00:00Z Apply the patches or mitigations from Progress; if none are available, stop using the product. For cloud services, follow the guidance from Progress. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2025. https://exploit-radar.com/en/cve/CVE-2024-1212/ CVE-2024-1212 — Progress Kemp LoadMaster 2024-11-18T00:00:00Z Apply the patches or mitigations from Progress; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 18, 2024. https://exploit-radar.com/en/cve/CVE-2024-6670/ CVE-2024-6670 — Progress WhatsUp Gold 2024-09-16T00:00:00Z Apply the patches or mitigations from Progress; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on September 16, 2024. https://exploit-radar.com/en/cve/CVE-2024-4358/ CVE-2024-4358 — Progress Telerik Report Server 2024-06-13T00:00:00Z Apply the patches or mitigations from Progress; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 13, 2024. https://exploit-radar.com/en/cve/CVE-2023-40044/ CVE-2023-40044 — Progress WS_FTP Server 2023-10-05T00:00:00Z Apply the patches or mitigations from Progress; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 5, 2023. https://exploit-radar.com/en/cve/CVE-2023-34362/ CVE-2023-34362 — Progress MOVEit Transfer 2023-06-02T00:00:00Z Apply the security update from Progress. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on June 2, 2023. https://exploit-radar.com/en/cve/CVE-2017-11357/ CVE-2017-11357 — Progress Telerik UI for ASP.NET AJAX 2023-01-26T00:00:00Z Apply the security update from Progress. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 26, 2023. https://exploit-radar.com/en/cve/CVE-2017-11317/ CVE-2017-11317 — Progress Telerik UI for ASP.NET AJAX 2022-04-11T00:00:00Z Apply the security update from Progress. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on April 11, 2022. https://exploit-radar.com/en/cve/CVE-2017-9248/ CVE-2017-9248 — Progress Telerik UI for ASP.NET AJAX 2021-11-03T00:00:00Z Apply the security update from Progress. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2019-18935/ CVE-2019-18935 — Progress Telerik UI for ASP.NET AJAX 2021-11-03T00:00:00Z Apply the security update from Progress. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.