Skip to content
OpenAdvisories
High WID-SEC-2026-0075 2 CVEs

Progress Software MOVEit WAF und Kemp LoadMaster: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jan 12, 2026 · Updated Jan 13, 2026 · Revision 2 · de-DE

Vendor: Kemp Vendor: Progress Software Product: LoadMaster Product: MOVEit Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Progress Software MOVEit und Kemp LoadMaster ausnutzen, um beliebigen Programmcode auszuführen.

Product

Progress MOVEit ist eine sichere Managed File Transfer (MFT)-Software, die Transparenz und Kontrolle über die Dateiübertragungsaktivitäten bietet.
LoadMaster ist eine Load Balancer Lösung von Progress Software.

Vulnerabilities 2

  • High 8.4
    CVE-2025-13444 EPSS 27%

    OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster

    OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API…

    Progress Software LoadMaster Multi Tenant LoadMaster
  • High 8.4
    CVE-2025-13447 EPSS 27%

    OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster

    OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API…

    Progress Software LoadMaster

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-2346, EUVD-2026-2343

  2. #1

    Initiale Fassung

References