CVEs published by Progress Software Corporation

CVEs published by Progress Software Corporation (CVE Numbering Authority). 15 tracked.

• CVE-2026-9192 CRITICAL 9.8 UPGRADE An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 1
• CVE-2026-9190 CRITICAL 9.1 UPGRADE An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Server before 11.3.6 and
• CVE-2026-7557 CRITICAL 9.1 UPGRADE An improper verification of cryptographic signature vulnerability in the SAML authentication module of Progres
• CVE-2026-7329 CRITICAL 9.9 UPGRADE An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress
• CVE-2026-9195 CRITICAL 9.3 UPGRADE A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.
• CVE-2026-8709 CRITICAL 9.9 UPGRADE An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic
• CVE-2026-9193 CRITICAL 9.9 UPGRADE An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 1
• CVE-2026-7327 HIGH 8.1 UPGRADE An improper privilege management vulnerability in the REST API document processing pipeline of Progress MarkLo
• CVE-2026-9203 HIGH 8.5 UPGRADE A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an au
• CVE-2026-7326 HIGH 7.5 UPGRADE A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0
• CVE-2026-65941 HIGH 8.8 UPGRADE In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to t
• CVE-2026-65937 HIGH 8.0 UPGRADE In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and
• CVE-2026-65939 MEDIUM 6.8 UPGRADE In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specify
• CVE-2026-65940 MEDIUM 6.8 UPGRADE In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-ac
• CVE-2026-65938 MEDIUM 4.3 UPGRADE In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Re

← Back to latest CVEs