Progress Software LoadMaster Schwachstellen (CVE)

Für Progress Software LoadMaster veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

19 Ergebnisse
8.0Hoch
CVE-2026-59690

Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API

Progress Software LoadMaster; Progress Software ECS Connection Manager; Progress Software Object Scale Connection Manager; Progress Software MOVEit WAF

A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged administrative operations v…

8.0Hoch
CVE-2026-59689

Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root

Progress Software LoadMaster; Progress Software ECS Connection Manager; Progress Software Object Scale Connection Manager; Progress Software MOVEit WAF

An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, po…

8.4Hoch
CVE-2026-59688

Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality

Progress Software LoadMaster; Progress Software ECS Connection Manager; Progress Software Object Scale Connection Manager; Progress Software MOVEit WAF

An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected…

1.7%EPSS
8.4Hoch
CVE-2026-59687

Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface

Progress Software LoadMaster; Progress Software ECS Connection Manager; Progress Software Object Scale Connection Manager; Progress Software MOVEit WAF

An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected…

1.7%EPSS
8.4Hoch
CVE-2026-59686

Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface

Progress Software LoadMaster; Progress Software ECS Connection Manager; Progress Software Object Scale Connection Manager; Progress Software MOVEit WAF

An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected…

1.7%EPSS
9.6Kritisch
CVE-2026-8037 KEV

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

Progress Software LoadMaster; Progress Software ECS Connections Manager; Progress Software Object Scale Connection Manager; Progress Software MOVEit WAF

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints

100%EPSS
8.4Hoch
CVE-2026-4048

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

Progress Software LoadMaster; Progress Software ECS Connections Manager; Progress Software Object Scale Connection Manager; Progress Software MOVEit WAF

OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in a custom WAF rule file…

2.1%EPSS
8.4Hoch
CVE-2026-3519

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

Progress Software LoadMaster; Progress Software ECS Connections Manager; Progress Software Object Scale Connection Manager; Progress Software MOVEit WAF

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'ac…

2.1%EPSS
8.4Hoch
CVE-2026-3518

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

Progress Software LoadMaster; Progress Software ECS Connections Manager; Progress Software Object Scale Connection Manager; Progress Software MOVEit WAF

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'killsession' command

17%EPSS
8.4Hoch
CVE-2026-3517

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

Progress Software LoadMaster; Progress Software ECS Connections Manager; Progress Software Object Scale Connection Manager; Progress Software MOVEit WAF

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “Geo Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'a…

15%EPSS
8.4Hoch
CVE-2025-13444

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster

Progress Software LoadMaster; Progress Software Multi Tenant LoadMaster

OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API…

27%EPSS
4.3Mittel
CVE-2025-1758
Progress LoadMaster

Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects: * LoadMaster: 7.2.40.0 and above * ECS: All versions * Multi-Tenancy: 7.1.35.4 and above

4.9%EPSS