Progress Software LoadMaster
15 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-59690 | 7.0.6 – < 7.2.63.3 ; 7.0.6 – < 7.2.54.19 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows P… | HIGH 8.0 | 0.3 % | ||
| CVE-2026-59689 | 7.2.36 – < 7.2.63.3 ; 7.2.36 – < 7.2.54.19 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Esca… | HIGH 8.0 | 0.3 % | ||
| CVE-2026-59688 | 7.2.40.0 – < 7.2.63.3 ; 7.2.40.0 – < 7.2.54.19 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Func… | HIGH 8.4 | 1.7 % | ||
| CVE-2026-59687 | 7.0.8 – < 7.2.63.3 ; 7.0.8 – < 7.2.54.19 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Manage… | HIGH 8.4 | 1.7 % | ||
| CVE-2026-59686 | All Previous Versions – < 7.2.63.3 ; All Previous Versions – < 7.2.54.19 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface | HIGH 8.4 | 1.7 % | ||
| CVE-2026-8037 | V7.2.60.0 – < V7.2.63.2 ; V7.2.54.12 – < V7.2.54.18 | OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager … | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2026-4048 | V7.1.20.0 – < V7.2.63.0 | OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager … | HIGH 8.4 | 2.1 % | ||
| CVE-2026-3519 | V7.2.45.0 – < V7.2.63.0 | OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager … | HIGH 8.4 | 2.1 % | ||
| CVE-2026-3518 | V7.2.37.0 – < V7.2.63.0 | OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager … | HIGH 8.4 | 17 % | ||
| CVE-2026-3517 | 7.1.32.0 – < V7.2.63.0 | OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager … | HIGH 8.4 | 15 % | ||
| CVE-2025-13447 | 7.2.50 – < V7.2.62.2 ; 7.1.32 – < V7.2.62.2 ; 7.2.37 – < V7.2.62.2 ; … | OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster | HIGH 8.4 | 27 % | ||
| CVE-2025-13444 | 7.2.50 – < V7.2.62.2 ; 7.2.50 – < V7.2.54.16 | OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster | HIGH 8.4 | 27 % | ||
| CVE-2024-2449 | 7.2.55.0 – < 7.2.59.3 ( LoadMaster GA) ; 7.2.49.0 – < 7.2.54.9 ( LoadMaster LTSF) ; 7.2.48.10 – < 7.2.48.11 (LoadMaster LTS) ; … | LoadMaster Cross-Site Request Forgery (CSRF) | HIGH 7.5 | 13 % | ||
| CVE-2024-2448 | 7.2.55.0 – < 7.2.59.3 ( LoadMaster GA) ; 7.2.49.0 – < 7.2.54.9 ( LoadMaster LTSF) ; 7.2.48.10 – < 7.2.48.11 (LoadMaster LTS) ; … | LoadMaster Command Injection Vulnerability | HIGH 8.8 | 55 % | ||
| CVE-2024-1212 | 7.2.48.1 – < 7.2.48.10 ; 7.2.54.0 – < 7.2.54.8 ; 7.2.55.0 – < 7.2.59.2 | LoadMaster Pre-Authenticated OS Command Injection | CRITICAL 10.0 | 95 % | KEV |