Aggiornamenti di sicurezza Progress risolvono molteplici vulnerabilità, di cui 6 con gravità “critica” e 3 con gravità “alta”, presenti in WS_FTP Server, soluzione software di file transfer sicuro utilizzata per trasferire, condividere e gestire file all'interno di organizzazioni e tra partner esterni.
Progress ha rilasciato aggiornamenti di sicurezza per sanare 6 vulnerabilità con gravità “alta” nel prodotto Telerik Document Processing Libraries. Tali vulnerabilità potrebbero consentire a un attaccante remoto, in alcuni casi non autenticato, di compromettere la disponibilità del servizio, eludere i meccanismi di sicurezza e leggere o scrivere file arbitrari sui sistemi interessati.
Serial number: AV26-1098 Date: October 28, 2026 As of October 28, 2026, Progress is affected by a vulnerability in the following product: Telerik Document Processing Libraries Prior to 2026.3.1027 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Document Processing Libraries Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing (CVE-2026-118035) Progress Trust…
Serial Number: AV26-1058 Date: October 16, 2026 As of October 14, 2026, Progress is affected by vulnerabilities in the following product: MOVEit Transfer Prior to 2025.1.6 Prior to 2026.0.4 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. MOVEit Transfer Critical Security Bulletin - September 2026 Progress Trust Center
Progress ha rilasciato aggiornamenti di sicurezza per sanare 12 vulnerabilità con gravità “alta” nel prodotto MOVEit Transfer. Tali vulnerabilità potrebbero consentire a un utente malintenzionato di eludere i meccanismi di autenticazione e di autorizzazione, di accedere a informazioni sensibili o compromettere la disponibilità del servizio dei sistemi interessati.
Serial number: AV26-1031 Date: October 13, 2026 As of October 12, 2026, Progress is affected by vulnerabilities in the following product: MarkLogic Server Prior to 11.3.7 Prior to 12.1.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Progress Customer Community Progress Trust Center
Serial number: AV26-1005 Date: October 6, 2026 As of October 6, 2026, Progress Software is affected by a vulnerability in the following product: Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator Prior to 2.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Progress DataDirect Critical Security Alert Bulletin – September 2026 – CVE-2026-91140 Progress Trust Center
Serial Number: AV26-915Date: September 11, 2026 As of September 11, 2026, Progress Software is affected by a vulnerability in the following product: Chef Automate Prior to 4.13.520 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Critical Security Bulletin - August 2026 - Chef Automate Security Vulnerability Progress Trust Center
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-8037.
Serial number: AV26-824Date: August 17, 2026 As of August 17, 2026, Progress is affected by vulnerabilities in the following product: ShareFile Storage Zones Controller Prior to or equal to 5.12.5 Prior to or equal to 6.0.2 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. ShareFile Storage Zones Controller (SZC) Service Disruption Guidance, Login Issues, and Access Information Progress Trust Center
De multiples vulnérabilités ont été découvertes dans Progress MOVEit WAF. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un contournement de la politique de sécurité.
Serial number: AV26-552Date: June 5, 2026Updated: Auguest 7, 2026 Between June 2 and 4, 2026, Progress published security advisories to address vulnerabilities in the following products. Included was a critical update for the following: Sitefinity CMS and Sitefinity Insight – multiple versions Progress Kemp LoadMaster – version GA v7.2.63.1 and prior Progress Kemp LoadMaster - version LTSF v7.2.54.17 and prior Update 1 Open-source reporting indicates that CVE-2026-8037 is being exploited in the…
For the latest discoveries in cyber research for the week of 6th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES River Bank & Trust, a US financial institution, has experienced a ransomware incident after an unauthorized actor accessed the network of parent company River Financial Corporation on June 16. The bank found ransomware on portions of its server environment and is assessing whether personal data was accessed or exfiltrated. Indra Group, a Spanish…