Product · Progress Software

LoadMaster

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.6

CVE-2026-8037 Exploited Public exploit EPSS 100%

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints

Progress Software LoadMaster MOVEit WAF Object Scale Connection Manager

Jun 4, 2026
KEV Aug 7, 2026
Critical 10.0

CVE-2024-1212 Exploited Public exploit EPSS 95%

LoadMaster Pre-Authenticated OS Command Injection

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.

Progress Software LoadMaster

Feb 21, 2024
KEV Nov 18, 2024