Progress Software LoadMaster vulnerabilities
15 published CVEs name Progress Software LoadMaster among the affected products; CISA lists 2 of them as exploited in the wild.
- Published CVEs
- 15
- Last 12 months
- 12
- Critical
- 2
- Known exploited
- 2
Critical 2High 13Medium 0Low 0Not scored 0
CVEs per yearBy the year they were published
- 20243
- 202610
- 20262
Known exploitedNewest addition to KEV first
- CVE-2026-8037
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
Progress Software · LoadMaster
ExploitedCritical9.6 - CVE-2024-1212
LoadMaster Pre-Authenticated OS Command Injection
Progress Software · LoadMaster
ExploitedCritical10.0
Newest CVEs
- CVE-2026-59690
Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API
Progress Software · LoadMaster
High8.0 - CVE-2026-59689
Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root
Progress Software · LoadMaster
High8.0 - CVE-2026-59688
Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality
Progress Software · LoadMaster
High8.4 - CVE-2026-59687
Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface
Progress Software · LoadMaster
High8.4 - CVE-2026-59686
Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface
Progress Software · LoadMaster
High8.4 - CVE-2026-8037
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
Progress Software · LoadMaster
ExploitedCritical9.6 - CVE-2026-4048
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
Progress Software · LoadMaster
High8.4 - CVE-2026-3519
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
Progress Software · LoadMaster
High8.4 - CVE-2026-3518
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
Progress Software · LoadMaster
High8.4 - CVE-2026-3517
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
Progress Software · LoadMaster
High8.4