Vulnerabilities

Summary — last 7 days

New vulnerabilities5,370▲ 2,556 vs. last week
Critical / high3,029▲ 1,703 vs. last week
New active exploitation (KEV)7▲ 1 vs. last week
Unscored (no CVSS)173▼ 27 vs. last week
–

4 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
Awaiting AnalysisHigh (7.3)0.19%—Progress Telerik Document ProcessingAI10/7/202610/8/2026
In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists when importing an XLS file with a specifically-targted corruption, the import timeout is ignored resulting in an unresponsive CPU thread and denial of service.
AnalyzedMedium (6.5)0.38%—Progress Telerik Document Processing Libraries2/12/20256/17/2026
In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), using .NET Standard 2.0, the contents of a file at an arbitrary path can be exported to RTF.
AnalyzedHigh (8.8)0.67%—Progress Telerik Document Processing Libraries2/12/20256/17/2026
In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), unzipping an archive can lead to arbitrary file system access.
AnalyzedMedium (6.5)0.43%—Progress Telerik Document Processing Libraries11/13/20246/17/2026
In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 (2024.4.1106), importing a document with unsupported features can lead to excessive processing, leading to excessive use of computing resources leaving the application process unavailable.
Orbitaley — Vulnerabilities