Progress: exploited vulnerabilities
- 9exploited vulnerabilities
- 4used by ransomware
- Aug 7, 2026latest one added
- WhatsUp Gold 2
- LoadMaster 1
- Kemp LoadMaster 1
- Telerik Report Server 1
- WS_FTP Server 1
- MOVEit Transfer 1
- Telerik UI for ASP.NET AJAX 1
- ASP.NET AJAX and Sitefinity 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Aug 7, 2026 | Command Injection | LoadMaster | Critical 9.6 | 99.8% |
| Mar 3, 2025 | Path Traversal | WhatsUp Gold | Critical 9.8 | 99.3% |
| Nov 18, 2024 | OS Command Injection | Kemp LoadMaster | Critical 10.0 | 95% |
| Sep 16, 2024 | SQL Injection | WhatsUp Gold | Critical 9.8 | 93% |
| Jun 13, 2024 | Authentication Bypass by Spoofing | Telerik Report Server | Critical 9.8 | 97% |
| Oct 5, 2023 | Deserialization of Untrusted Data | WS_FTP Server | Critical 10.0 | 90% |
| Jun 2, 2023 | SQL Injection | MOVEit Transfer | Critical 9.8 | 99.9% |
| Nov 3, 2021 | Deserialization of Untrusted Data | Telerik UI for ASP.NET AJAX | Critical 9.8 | 99.7% |
| Nov 3, 2021 | Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness | ASP.NET AJAX and Sitefinity | Critical 9.8 | 75% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.