Skip to content
OpenAdvisories
High WID-SEC-2026-2544 5 CVEs

Progress Software LoadMaster und MOVEit WAF: Mehrere Schwachstellen

Published Jul 27, 2026 · Updated Jul 27, 2026 · de-DE

Vendor: Progress Software Product: LoadMaster Product: MOVEit Platform: Windows

Summary

Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Progress Software LoadMaster und Progress Software MOVEit ausnutzen, um beliebigen Programmcode auszuführen und Root-Rechte zu erlangen.

Product

LoadMaster ist eine Load Balancer Lösung von Progress Software.
Progress MOVEit ist eine sichere Managed File Transfer (MFT)-Software, die Transparenz und Kontrolle über die Dateiübertragungsaktivitäten bietet.

Vulnerabilities 5

  • High 8.4
    CVE-2026-59686

    Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface

    An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected…

    Progress Software LoadMaster Object Scale Connection Manager MOVEit WAF
  • High 8.4
    CVE-2026-59687

    Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface

    An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected…

    Progress Software LoadMaster Object Scale Connection Manager MOVEit WAF
  • High 8.4
    CVE-2026-59688

    Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality

    An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected…

    Progress Software LoadMaster Object Scale Connection Manager MOVEit WAF
  • High 8.0
    CVE-2026-59689

    Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root

    An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, po…

    Progress Software LoadMaster Object Scale Connection Manager MOVEit WAF
  • High 8.0
    CVE-2026-59690

    Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API

    A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged administrative operations v…

    Progress Software LoadMaster MOVEit WAF Object Scale Connection Manager

Revision history

  1. #1

    Initiale Fassung

References