Progress Software Loadmaster vulnerabilities

• progress ecs connection manager, loadmaster, progress software moveit waf +5 more +7 more Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API CVE-2026-59690 8.0 HighJuly 27, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 more Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root CVE-2026-59689 8.0 HighJuly 27, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 more Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality CVE-2026-59688 8.4 HighJuly 27, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 more Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface CVE-2026-59687 8.4 HighJuly 27, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 more Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface CVE-2026-59686 8.4 HighJuly 27, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +4 more +6 more OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF CVE-2026-8037 In KEVPublic exploit EPSS 99.8% 9.6 CriticalJune 4, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 more OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF CVE-2026-4048 8.4 HighApril 20, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 more OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF CVE-2026-3519 8.4 HighApril 20, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 more OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF CVE-2026-3518 EPSS 16.9% 8.4 HighApril 20, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 more OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF CVE-2026-3517 EPSS 15.5% 8.4 HighApril 20, 2026
• progress loadmaster, connection manager for objectscale*, ecs connection manager +2 more +4 more OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster CVE-2025-13447 EPSS 27.2% 8.4 HighJanuary 13, 2026
• progress loadmaster, connection manager for objectscale, ecs connection manager +3 more +5 more OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster CVE-2025-13444 EPSS 27.2% 8.4 HighJanuary 13, 2026
• progress loadmaster, multi-tenant loadmaster +1 more Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue... CVE-2025-1758 4.3 MediumMarch 19, 2025
• progress loadmaster, multi-tenant loadmaster +1 more Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. CVE-2024-56135 8.4 HighFebruary 5, 2025
• progress loadmaster, multi-tenant loadmaster +1 more Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. CVE-2024-56134 8.4 HighFebruary 5, 2025
• progress loadmaster, multi-tenant loadmaster +1 more Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. CVE-2024-56133 8.4 HighFebruary 5, 2025
• progress loadmaster, multi-tenant loadmaster +1 more Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. CVE-2024-56132 8.4 HighFebruary 5, 2025
• progress loadmaster, multi-tenant loadmaster +1 more Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. CVE-2024-56131 8.4 HighFebruary 5, 2025
• kemptechnologies loadmaster Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. CVE-2024-8755 8.4 HighOctober 11, 2024
• kemptechnologies loadmaster, loadmaster mt, progress multi-tenant loadmaster +2 more Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection. CVE-2024-6658 8.4 HighSeptember 12, 2024
• kemptechnologies loadmaster, loadmaster mt, multi-tenant hypervisor firmware +2 more Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection CVE-2024-7591 Public exploit EPSS 39.2% 10.0 CriticalSeptember 5, 2024
• kemptechnologies loadmaster LoadMaster Hardcoded SSH Key CVE-2024-3544 7.5 HighMay 2, 2024
• kemptechnologies loadmaster LoadMaster Reversible Password Encryption Algorithm CVE-2024-3543 6.4 MediumMay 2, 2024
• kemptechnologies loadmaster LoadMaster Cross-Site Request Forgery (CSRF) CVE-2024-2449 EPSS 12.9% 7.5 HighMarch 22, 2024
• kemptechnologies loadmaster LoadMaster Command Injection Vulnerability CVE-2024-2448 EPSS 55.4% 8.4 HighMarch 22, 2024
• kemptechnologies loadmaster, progress kemp loadmaster +1 more LoadMaster Pre-Authenticated OS Command Injection CVE-2024-1212 In KEVPublic exploit EPSS 95.4% 10.0 CriticalFebruary 21, 2024