8.0Yüksek
CVE-2026-59689Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root
Açıklama
An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, potentially resulting in full system compromise.
Zayıflık türü (CWE):
CWE-863
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| progress | connection manager for objectscale | < 7.2.63.3 | |
| Progress Software | ECS Connection Manager | 7.2.60.0 – < 7.2.63.3 | |
| Progress Software | LoadMaster | 7.2.36 – < 7.2.63.3, 7.2.36 – < 7.2.54.19 | |
| Progress Software | MOVEit WAF | 7.2.60.0 – < 7.2.63.3 | |
| progress | moveit web application firewall | < 7.2.63.3 | |
| Progress Software | Object Scale Connection Manager | 7.2.60.0 – < 7.2.63.3 |
Kaynaklar ve yamalar
- https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-July-2026-CVE-2026-59686-CVE-2… vendor-advisoryVendor Advisory
CPE eşleşmeleri (NVD) (5)
cpe:2.3:a:progress:connection_manager_for_objectscale:*:*:*:*:*:*:*:*< 7.2.63.3cpe:2.3:a:progress:ecs_connection_manager:*:*:*:*:*:*:*:*< 7.2.63.3cpe:2.3:a:progress:moveit_web_application_firewall:*:*:*:*:*:*:*:*< 7.2.63.3cpe:2.3:o:progress:loadmaster:*:*:*:*:*:*:*:*< 7.2.54.19cpe:2.3:o:progress:loadmaster:*:*:*:*:*:*:*:*≥ 7.2.55.0 < 7.2.63.3