目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Progress Software 厂商漏洞列表 / CVE 中文分析 165

Progress Software 厂商相关 165 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Progress Software 主要提供企业级应用开发平台及数据库解决方案。其产品线历史上频繁出现远程代码执行、SQL 注入及身份验证绕过等高危漏洞，累计收录 CVE 达 55 条。值得关注的是，其 OpenEdge 和 Telerik 组件常因默认配置不当或补丁更新滞后成为攻击目标。厂商需持续强化代码审计与供应链安全，以应对日益复杂的自动化攻击手段，确保企业核心业务系统的稳定性与数据机密性。

Top products by Progress Software: Kendo UI for jQuery WS_FTP Server Telerik UI for ASP.NET AJAX LoadMaster Telerik Document Processing Libraries Flowmon Telerik Report Server MOVEit Automation Telerik Reporting Sitefinity KendoReact Telerik UI for WPF Progress® Telerik® Fiddler® Classic Flowmon ADS Progress® Telerik® Fiddler® Everywhere Kendo UI for Vue Kendo UI for Angular Chef Automate Hybrid Data Pipeline Telerik UI for WinForms Telerik JustDecompile Chef Inspec Progress® Telerik® Kendo UI for Vue Progress® Telerik® Document Processing Libraries Telerik KendoReact Progress® Telerik® UI for WinForms @progress/sitefinity-nextjs-sdk Autonomous REST Connector GenAI Agents Telerik UI for WinUI MOVEit Transfer
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-106158 Kendo UI for jQuery 调度器颜色跨站脚本漏洞 — Kendo UI for jQuery CWE-80 4.7 Medium 2026-10-15
CVE-2026-106157 Kendo UI for jQuery PanelBar 项 URL 跨站脚本漏洞 — Kendo UI for jQuery CWE-80 4.7 Medium 2026-10-15
CVE-2026-106162 Kendo UI for jQuery 文件管理器拖拽提示跨站脚本漏洞 — Kendo UI for jQuery CWE-80 4.7 Medium 2026-10-15
CVE-2026-106163 Kendo UI for jQuery FileBrowser 和 ImageBrowser 跨站脚本漏洞 — Kendo UI for jQuery CWE-80 6.5 Medium 2026-10-15
CVE-2026-106139 Kendo UI for Vue 图表工具提示跨站脚本漏洞 — Kendo UI for Vue CWE-80 5.4 Medium 2026-10-10
CVE-2026-106138 KendoReact 图表提示跨站脚本漏洞 — KendoReact CWE-80 5.4 Medium 2026-10-10
CVE-2026-106155 Telerik Report Server Web报告查看器存储型XSS漏洞 — Telerik Report Server CWE-79 8.9 High 2026-10-09
CVE-2026-106145 Telerik Report Server Service-Agent Hub 权限提升漏洞 — Telerik Report Server CWE-266 7.1 High 2026-10-09
CVE-2026-106164 Telerik文档处理XLS导入无限循环漏洞 — Telerik Document Processing Libraries CWE-835 7.3 High 2026-10-07
CVE-2026-91140 Progress Software Autonomous REST Connector GenAI Agents 命令注入漏洞 — Autonomous REST Connector GenAI Agents CWE-78 9.6 Critical 2026-10-06
CVE-2026-92931 Progress Sitefinity Next.js 渲染SDK服务端请求伪造漏洞 — @progress/sitefinity-nextjs-sdk CWE-918 8.8 High 2026-10-05
CVE-2026-77805 Progress Telerik Fiddler Classic 弱可执行签名验证漏洞 — Progress® Telerik® Fiddler® Classic CWE-347 7.9 High 2026-10-05
CVE-2026-77804 Progress Telerik Fiddler Classic 根证书安装TOCTOU竞争漏洞 — Progress® Telerik® Fiddler® Classic CWE-367 6.6 Medium 2026-10-05
CVE-2026-77803 Progress Telerik Fiddler Classic 前端不同步漏洞 — Progress® Telerik® Fiddler® Classic CWE-444 3.6 Low 2026-10-05
CVE-2026-77802 Progress Telerik Fiddler Classic HTTP请求走私漏洞 — Progress® Telerik® Fiddler® Classic CWE-444 6.3 Medium 2026-10-05
CVE-2026-86158 Progress Telerik Fiddler Everywhere .NET后端缺少身份验证漏洞 — Progress® Telerik® Fiddler® Everywhere CWE-306 7.7 High 2026-09-29
CVE-2026-86157 Progress Telerik Fiddler Everywhere 特权 IPC 功能暴露漏洞 — Progress® Telerik® Fiddler® Everywhere CWE-749 5.6 Medium 2026-09-29
CVE-2026-80462 Progress Software Chef Automate 授权问题漏洞 — Chef Automate CWE-306 10.0 Critical 2026-09-11
CVE-2026-19219 Progress Telerik UI for AJAX 输入验证错误漏洞 — Telerik UI for ASP.NET AJAX CWE-345 8.1 High 2026-09-02
CVE-2026-18672 Progress Telerik UI for AJAX 路径遍历漏洞 — Telerik UI for ASP.NET AJAX CWE-22 7.5 High 2026-09-02
CVE-2026-59690 Progress Software LoadMaster 授权问题漏洞 — LoadMaster CWE-862 8.0 High 2026-07-27
CVE-2026-59689 Progress Software LoadMaster 授权问题漏洞 — LoadMaster CWE-863 8.0 High 2026-07-27
CVE-2026-59688 Progress Software LoadMaster 命令注入漏洞 — LoadMaster CWE-78 8.4 High 2026-07-27
CVE-2026-59687 Progress Software LoadMaster 命令注入漏洞 — LoadMaster CWE-78 8.4 High 2026-07-27
CVE-2026-59686 Progress Software LoadMaster 命令注入漏洞 — LoadMaster CWE-78 8.4 High 2026-07-27
CVE-2026-14932 Progress Software Progress Telerik UI for AJAX 加密问题漏洞 — Telerik UI for ASP.NET AJAX CWE-321 6.5 Medium 2026-07-22
CVE-2026-14865 Progress Software Progress Telerik UI for AJAX 资源管理错误漏洞 — Telerik UI for ASP.NET AJAX CWE-776 5.3 Medium 2026-07-22
CVE-2026-13192 Progress Software Progress Telerik UI for AJAX 服务端请求伪造漏洞 — Telerik UI for ASP.NET AJAX CWE-918 6.5 Medium 2026-07-22
CVE-2026-13190 Progress Software Progress Telerik UI for AJAX 反序列化注入漏洞 — Telerik UI for ASP.NET AJAX CWE-502 8.1 High 2026-07-22
CVE-2026-13189 Progress Software Progress Telerik UI for AJAX 路径遍历漏洞 — Telerik UI for ASP.NET AJAX CWE-36 7.5 High 2026-07-22

本页汇总了 Progress Software 厂商截至目前公开的全部 165 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。