Progress Moveit Web Application Firewall vulnerabilities

• progress ecs connection manager, loadmaster, progress software moveit waf +5 more +7 more Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API CVE-2026-59690 8.0 HighJuly 27, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 more Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root CVE-2026-59689 8.0 HighJuly 27, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 more Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality CVE-2026-59688 8.4 HighJuly 27, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 more Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface CVE-2026-59687 8.4 HighJuly 27, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 more Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface CVE-2026-59686 8.4 HighJuly 27, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +4 more +6 more OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF CVE-2026-8037 In KEVPublic exploit EPSS 99.8% 9.6 CriticalJune 4, 2026
• progress loadmaster, connection manager for objectscale, ecs connection manager +3 more +5 more OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster CVE-2025-13444 EPSS 27.2% 8.4 HighJanuary 13, 2026