Product · Progress Software

MOVEit WAF

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.6

CVE-2026-8037 Exploited Public exploit EPSS 100%

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints

Progress Software LoadMaster MOVEit WAF Object Scale Connection Manager

Jun 4, 2026
KEV Aug 7, 2026