ZDI-CAN-29249 HIGH 8.8 Upcoming Feb 23, 2026

Progress Software

Progress Software is a well-known vendor of enterprise application development and management solutions. This vulnerability has a high CVSS score of 8.8 and can be exploited remotely by an authenticated attacker with low complexity, resulting in complete compromise of confidentiality, integrity, and availability with no user interaction required. Security teams should monitor for patches expected by the June 2026 deadline and consider implementing access controls to limit who can authenticate to affected Progress Software systems.

Advisory Details
Researcher Michael Argany of TrendAI Research
Reported February 23, 2026
Deadline June 23, 2026 68d
CVSS Vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy