CVE-2024-6670

CVE-2024-6670 PoC for Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability CVE-2024-6670 A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/ Usage python CVE-2024-6670.py...

CVE-2026-118975: Progress Software Telerik Reporting: In Progress® Telerik® Reporting prior to version 20.3.26.1110, improper restriction of XML external entity references…

In Progress® Telerik® Reporting prior to version 20.3.26.1110, improper restriction of XML external entity references in the SVG processing engine allows an authenticated attacker with low privileges who can supply SVG content to a report to read local or UNC files, or trigger server-side network...

CVE-2026-106152: Progress Software Telerik Report Server: In Progress® Telerik® Report Server prior to version 12.3.26.1110, an external control of a system configuration…

In Progress® Telerik® Report Server prior to version 12.3.26.1110, an external control of a system configuration setting vulnerability allows an unauthenticated remote attacker to influence the server address used by Report Server when generating links and notifications. With user interaction, th...

CVE-2026-106133: Progress Software Telerik Report Server: In Progress® Telerik® Report Server prior to version 12.3.26.1110, an incorrect authorization vulnerability in the Web…

In Progress® Telerik® Report Server prior to version 12.3.26.1110, an incorrect authorization vulnerability in the Web Report Designer allows an authenticated attacker with low privileges to perform unauthorized operations on shared report resources, affecting their integrity and availability...

CVE-2026-115339

Insufficient resource limits in Progress Software WSFTP Server releases prior to 2025.0.5 on Windows could allow an unauthenticated remote attacker to cause denial of service...

CVE-2026-115340

Progress Software WSFTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session data to a temporary file during file transfer operations...

CVE-2026-115336

Incorrect quota accounting in Progress Software WSFTP Server releases prior to 2025.0.5 on Windows could allow an authenticated user with upload and delete permissions to exceed storage quotas, potentially causing denial of service...

EUVD-2026-120114

Progress Software WSFTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session data to a temporary file during file transfer operations...

CVE-2026-115340

Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows are vulnerable to the insecure storage of sensitive information. During file transfer operations, the software may write user credentials and session data to a temporary file . This issue could lead to unauthorized access to se...

EUVD-2026-120113

Insufficient resource limits in Progress Software WSFTP Server releases prior to 2025.0.5 on Windows could allow an unauthenticated remote attacker to cause denial of service...

CVE-2026-115339

Progress Software WS_FTP Server on Windows is affected by CVE-2026-115339 due to insufficient resource limits in releases prior to 2025.0.5 . This vulnerability could allow an unauthenticated remote attacker to cause a denial of service . While specific technical details on the memory exhaustion ...

CVE-2026-115336

Progress Software WS_FTP Server releases prior to version 2025.0.5 on Windows are vulnerable to a quota accounting bypass due to incorrect calculations. An authenticated user possessing both upload and delete permissions can exploit this flaw to exceed established storage quotas, which may lead t...

EUVD-2026-120110

Incorrect quota accounting in Progress Software WSFTP Server releases prior to 2025.0.5 on Windows could allow an authenticated user with upload and delete permissions to exceed storage quotas, potentially causing denial of service...

Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of GetFileWithoutZip method. The issue results from th...

CVE-2026-115336: Progress Software WS_FTP Server: Incorrect quota accounting in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an…

Incorrect quota accounting in Progress Software WSFTP Server releases prior to 2025.0.5 on Windows could allow an authenticated user with upload and delete permissions to exceed storage quotas, potentially causing denial of service...

PT-2026-140443

Insufficient resource limits in Progress Software WS FTP Server releases prior to 2025.0.5 on Windows could allow an unauthenticated remote attacker to cause denial of service...

CVE-2026-115339: Progress Software WS_FTP Server: Insufficient resource limits in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an…

Insufficient resource limits in Progress Software WSFTP Server releases prior to 2025.0.5 on Windows could allow an unauthenticated remote attacker to cause denial of service...

CVE-2026-115340: Progress Software WS_FTP Server: Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session…

Progress Software WSFTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session data to a temporary file during file transfer operations...

PT-2026-140440

Incorrect quota accounting in Progress Software WS FTP Server releases prior to 2025.0.5 on Windows could allow an authenticated user with upload and delete permissions to exceed storage quotas, potentially causing denial of service...

CVE-2026-115341: Progress Software WS_FTP Server: Improper access restrictions in the Thin Client Web Transfer component of Progress Software WS_FTP Server versions…

Improper access restrictions in the Thin Client Web Transfer component of Progress Software WSFTP Server versions prior to 2025.0.5 on Windows could allow an authenticated FTP user to access files outside their intended scope...