Loadmaster (Progress Software) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-07-27. Vendor: Progress Software.
CVEs of Loadmaster
- CVE-2026-59690 - CVSS 8 (high), 2026-07-27: A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant…
- CVE-2026-59689 - CVSS 8 (high), 2026-07-27: An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an…
- CVE-2026-59688 - CVSS 8.4 (high), 2026-07-27: An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an…
- CVE-2026-59687 - CVSS 8.4 (high), 2026-07-27: An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an…
- CVE-2026-59686 - CVSS 8.4 (high), 2026-07-27: An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an…
- CVE-2026-8037 - CVSS 9.8 (critical), 2026-06-04: OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on…
- CVE-2026-4048 - CVSS 8.4 (high), 2026-04-20: OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute…
- CVE-2026-3517 - CVSS 8.4 (high), 2026-04-20: OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “Geo Administration”…
- CVE-2026-3519 - CVSS 8.4 (high), 2026-04-20: OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS Administration” permissions…
- CVE-2026-3518 - CVSS 8.4 (high), 2026-04-20: OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “All” permissions to execute…
- CVE-2025-13447 - CVSS 8.4 (high), 2026-01-13: OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions…
- CVE-2025-13444 - CVSS 8.4 (high), 2026-01-13: OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions…
- CVE-2024-2449 - CVSS 7.5 (high), 2024-03-22: A cross-site request forgery vulnerability has been identified in LoadMaster. It is possible for a malicious actor, who has prior knowledge of the IP or…
- CVE-2024-2448 - CVSS 8.8 (high), 2024-03-22: An OS command injection vulnerability has been identified in LoadMaster. An authenticated UI user with any permission settings may be able to inject commands…
- CVE-2024-1212 - CVSS 10 (critical), 2024-02-21: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.
