Vendor
Progressive Robot vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 34 vulnerabilities in Progressive Robot: 18 in the last 7 days and 34 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-126626, was published on 11 November 2026. 15 vulnerabilities in the last four weeks, up 1400% on the four before (1). 0 critical against 1. 1 technology has a page of its own.
- Last 7 days
- 18
- Last 90 days
- 34
- Critical, all time
- 1
- Exploited in the wild
- 0
About Progressive Robot
Open-source tool for automating repetitive tasks and managing robotic process automation workflows.
Progressive Robot technologies
Latest Progressive Robot vulnerabilities
- CVE-2026-126626: Progressive Robot hMailServer denial of service in web services listenermediumCVSS 5.3
- CVE-2026-126625: hMailServer Windows installer privilege escalation via insecure folder permissionsmediumCVSS 6.7
- CVE-2026-126624: hMailServer Windows installer privilege escalation in Bin folderhighCVSS 7.3
- CVE-2026-126623: Progressive Robot hMailServer inefficient JSON parsing DoShighCVSS 7.5
- CVE-2026-126622: Progressive Robot hMailServer incorrect default installer permissionshighCVSS 7.3
- CVE-2026-126621: Progressive Robot hMailServer TLS file path traversal on WindowshighCVSS 7.5
- CVE-2026-126619: Progressive Robot hMailServer SQL statement misinterpretationmediumCVSS 4.8
- CVE-2026-126618: hMailServer account password brute-force via auto-ban bypassmediumCVSS 5.3
- CVE-2026-126617: Progressive Robot hMailServer SQL injection in database layerhighCVSS 8.8
- CVE-2026-126616: hMailServer auto-ban bypass via UTF-8 character handlingmediumCVSS 5.3
- CVE-2026-126615: Progressive Robot hMailServer authentication bypass and lockout evasionmediumCVSS 5.3
- CVE-2026-126614: Progressive Robot hMailServer IP ranges bypass in web services listenermediumCVSS 5.3
- CVE-2026-126613: Progressive Robot hMailServer JSON reader resource exhaustionhighCVSS 7.5
- CVE-2026-126612: Progressive Robot hMailServer privilege escalation in Windows installerhighCVSS 7.8
- CVE-2026-126611: Progressive Robot hMailServer TLS certificate verification bypasshighCVSS 7
- CVE-2026-126610: Progressive Robot hMailServer TLS CA file bypasshighCVSS 7.4
- CVE-2026-126609: hMailServer TLS certificate validation bypass on Windows with PostgreSQLhighCVSS 7.5
- CVE-2026-126607: Progressive Robot hMailServer path traversal in MariaDB Connector plugin loadinghighCVSS 7.8
- CVE-2026-114490: hMailServer authorization bypass in COM administration APIhighCVSS 7.8
- CVE-2026-114489: Progressive Robot hMailServer missing authorization in REST and COM administration APIshighCVSS 8.1
- CVE-2026-114479: Progressive Robot hMailServer anti-virus attachment-stripping failuremediumCVSS 5.8
- CVE-2026-114477: Progressive Robot hMailServer missing authorization in REST metrics routemediumCVSS 4.3
- CVE-2026-114476: hMailServer REST API authorization bypass in role managementhighCVSS 7.5
- CVE-2026-114475: Progressive Robot hMailServer REST authorization bypass in role managementmediumCVSS 6.5
- CVE-2026-114474: hMailServer SPF/DMARC bypass via external account forwardingmediumCVSS 5.9
Most severe Progressive Robot vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-100741: Progressive Robot hMailServer code injection in JScript event dispatchercriticalCVSS 9.8
- CVE-2026-126617: Progressive Robot hMailServer SQL injection in database layerhighCVSS 8.8
- CVE-2026-114489: Progressive Robot hMailServer missing authorization in REST and COM administration APIshighCVSS 8.1
- CVE-2026-126612: Progressive Robot hMailServer privilege escalation in Windows installerhighCVSS 7.8
- CVE-2026-126607: Progressive Robot hMailServer path traversal in MariaDB Connector plugin loadinghighCVSS 7.8
- CVE-2026-114490: hMailServer authorization bypass in COM administration APIhighCVSS 7.8
- CVE-2026-107571: hMailServer Windows installer privilege escalation via incorrect folder permissionshighCVSS 7.8
- CVE-2026-126623: Progressive Robot hMailServer inefficient JSON parsing DoShighCVSS 7.5
- CVE-2026-126621: Progressive Robot hMailServer TLS file path traversal on WindowshighCVSS 7.5
- CVE-2026-126613: Progressive Robot hMailServer JSON reader resource exhaustionhighCVSS 7.5
Vulnerabilities per week
15 vulnerabilities in the last four weeks, up 1400% on the four before (1). 0 critical against 1. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 1 | 1 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 15 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 18 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Progressive Robot vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/progressive-robot)<a href="https://junglewise.ai/threats/vendors/progressive-robot"><img src="https://junglewise.ai/threats/vendors/progressive-robot/badge.svg" alt="Progressive Robot vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/progressive-robot.json, and this page as text at https://junglewise.ai/threats/vendors/progressive-robot.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Progressive Robot vulnerabilities", https://junglewise.ai/threats/vendors/progressive-robot, 12 November 2026.