CVE-2026-59687

Description

An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the Geo Location management interface, potentially resulting in complete system compromise.

Traduire en français

Produits concernés

• Progress Software LoadMaster
• Progress Software ECS Connection Manager
• Progress Software Object Scale Connection Manager
• Progress Software MOVEit WAF
• Progress connection manager for objectscale
• Progress ecs connection manager
• Progress moveit web application firewall
• Progress loadmaster

Scores CVSS

Faiblesses (CWE)

• CWE-78

Références

• https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-July-2026-CVE-2026-59686-CVE-2026-59687-CVE-2026-59688-CVE-2026-59689-CVE-2026-59690 Vendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories