CVE-2026-59689

8.0 Élevée

Publiée le 27/07/2026 à 15:18 · Modifiée le 11/08/2026 à 16:12 · Analysée par le NVD · Source : security@progress.com

Description

An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, potentially resulting in full system compromise.

Traduire en français

Produits concernés

Progress Software LoadMaster
Progress Software ECS Connection Manager
Progress Software Object Scale Connection Manager
Progress Software MOVEit WAF
Progress connection manager for objectscale
Progress ecs connection manager
Progress moveit web application firewall
Progress loadmaster

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.0 Élevée	security@progress.com	`CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-863

Références

https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-July-2026-CVE-2026-59686-CVE-2026-59687-CVE-2026-59688-CVE-2026-59689-CVE-2026-59690 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories