https://cvebrief.com/archive/cves/vendor/progress/ High and critical Progress vulnerabilities covered by CVE Brief, with independent analyst commentary. en-us Tue, 18 Aug 2026 12:00:00 GMT https://cvebrief.com/cve/cve-2026-16138/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-progress-CVE-2026-16138 Tue, 18 Aug 2026 12:00:00 GMT In Progress ShareFile Storage Zones Controller v5 Fix documented (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-11903/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-progress-CVE-2026-11903 Thu, 09 Jul 2026 12:00:00 GMT Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module) Fix documented: 2026.0.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-2699/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-progress-CVE-2026-2699 Fri, 03 Apr 2026 12:00:00 GMT Citrix ShareFile Storage Zones Controller (SZC) contains a flaw allowing unauthenticated attackers to access restricted configuration pages, leading to system changes and remote code execution. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-2701/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-progress-CVE-2026-2701 Fri, 03 Apr 2026 12:00:00 GMT An authenticated file upload vulnerability allows attackers to upload and execute malicious files, leading to remote code execution on the server. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-10932/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-progress-CVE-2025-10932 Wed, 29 Oct 2025 12:00:00 GMT Uncontrolled Resource Consumption vulnerability in Progress MOVEit Transfer (AS2 module) Fix documented: 2025.0.3 (CVE record). Independent analyst report on CVE Brief.