Progress security advisory (AV26-999)

Serial Number: AV26-999
Date: October 5, 2026

As of October 5, 2026, Progress Software is affected by vulnerabilities in the following product:

• Progress Telerik Fiddler Classic
  • Prior to 6.0.20262.10021
• @progress/sitefinity-nextjs-sdk
  • Prior to 15.4.8638

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Weak Executable Signature Verification Vulnerability (CVE-2026-77805)
• Sitefinity Critical Security Advisory for Addressing Security Vulnerabilities in Next.js September 2026
• Progress Trust Center