Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports

Filtered Reports

5 / 7 results
Active filter:vendor: progress✕ clear
Telerik UI for ASP.NET AJAX RCE exploit published, patch availablehighbug_reportVulnerability
bug_reportVulnerability

Telerik UI for ASP.NET AJAX RCE exploit published, patch available

Telerik UI for ASP.NET AJAX versions 2010.1.309 through 2026.2.519. Exploitation requires non-default configuration: RadAsyncUpload control with custom encryption key and server-side handler reading upload results.

Progress7 Sep · 09:20 UTC
Progress Kemp LoadMaster command injection flaw exploited in the wildcriticalbug_reportVulnerability
bug_reportVulnerability

Progress Kemp LoadMaster command injection flaw exploited in the wild

Progress Kemp LoadMaster GA v7.2.63.1 and older, LTSF v7.2.54.17 and older; MOVEit WAF all versions before GA v7.2.63.2. Approximately 300 instances exposed online. Used by Fortune 500 companies and government agencies including Amazon and U.S.

Progress10 Aug · 07:49 UTC
Progress Kemp LoadMaster command injection (CVE-2026-8037) exploitedcriticalbug_reportVulnerability
bug_reportVulnerability

Progress Kemp LoadMaster command injection (CVE-2026-8037) exploited

Progress Kemp LoadMaster appliances. All versions with vulnerable escape_quotes() function. Unauthenticated remote attack vector.

CVE-2026-80378 Aug · 04:52 UTC
Progress Telerik UI for AJAX RCE vulnerability requires immediate patchingcriticalbug_reportVulnerability
bug_reportVulnerability

Progress Telerik UI for AJAX RCE vulnerability requires immediate patching

Progress Telerik UI for AJAX - specific affected versions not disclosed in available information. Vulnerability enables remote code execution.

Progress23 Jul · 13:51 UTC
Progress Kemp LoadMaster RCE under active exploitation (CVE-2026-8037)criticalbug_reportVulnerability
bug_reportVulnerability

Progress Kemp LoadMaster RCE under active exploitation (CVE-2026-8037)

Progress Kemp LoadMaster load balancers. Specific affected versions not disclosed. Pre-authentication vulnerability allows unauthenticated remote attackers to execute OS commands.

CVE-2026-80371 Jul · 11:56 UTC