IT management, remote access and backup

Progress Software (MOVEit, WS_FTP) security incident history

Updated Oct 26, 2026. Data gathered daily from official public sources.

As of Oct 26, 2026, Vendor History found 9 actively exploited security flaws for Progress Software (MOVEit, WS_FTP), dated Nov 3, 2021 to Aug 7, 2026. Sources checked: the California and Washington Attorney General breach lists, SEC EDGAR (Form 8-K, Item 1.05) and CISA's Known Exploited Vulnerabilities catalog.

Breach notices and SEC cyber filings

None found in the sources we check.

Got a breach letter from Progress Software (MOVEit, WS_FTP)? What to do when a vendor has a data breach.

Actively exploited security flaws

Flaws in Progress Software (MOVEit, WS_FTP) products that CISA lists as exploited by attackers. If you use an affected product, check that it's updated. What a listing means.

1. Aug 7, 2026Exploited flaw

   Progress LoadMaster Command Injection Vulnerability (CVE-2026-8037). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

2. Mar 3, 2025Exploited flaw

   Progress WhatsUp Gold Path Traversal Vulnerability (CVE-2024-4885). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

3. Nov 18, 2024Exploited flaw

   Progress Kemp LoadMaster OS Command Injection Vulnerability (CVE-2024-1212). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

4. Sep 16, 2024Exploited flaw

   Progress WhatsUp Gold SQL Injection Vulnerability (CVE-2024-6670). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

   Source: CISA Known Exploited Vulnerabilities catalog

5. Jun 13, 2024Exploited flaw

   Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability (CVE-2024-4358). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

6. Oct 5, 2023Exploited flaw

   Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability (CVE-2023-40044). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

   Source: CISA Known Exploited Vulnerabilities catalog

7. Jun 2, 2023Exploited flaw

   Progress MOVEit Transfer SQL Injection Vulnerability (CVE-2023-34362). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

   Source: CISA Known Exploited Vulnerabilities catalog

8. Nov 3, 2021Exploited flaw

   Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability (CVE-2017-9248). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

9. Nov 3, 2021Exploited flaw

   Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability (CVE-2019-18935). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

   Source: CISA Known Exploited Vulnerabilities catalog

We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works

To cite: Vendor History, "Progress Software (MOVEit, WS_FTP) security incident history," vendorhistory.com/vendor/progress, data checked Oct 26, 2026. Free to reuse under CC BY 4.0 with credit to Vendor History.