CVE-2026-59688

CVSS Score & Metrics

Base Score

8.4 / 10

Vector String

                                        CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H                                    

Vulnerability Description

An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the backup restore functionality, potentially resulting in complete system compromise.

Vulnerability Details

Published Date

July 27, 2026

Last Modified

July 27, 2026

CWE ID

CWE-78

Source

NVD

Vendor

Progress Software

Product

LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF

External References

https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-July-2026-CVE-2026-59686-CVE-2026-59687-CVE-2026-59688-CVE-2026-59689-CVE-2026-59690

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment