CVE-2026-59689

CVSS Score & Metrics

Base Score

8.0 / 10

Vector String

                                        CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H                                    

Vulnerability Description

An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, potentially resulting in full system compromise.

Vulnerability Details

Published Date

July 27, 2026

Last Modified

July 27, 2026

CWE ID

CWE-863

Source

NVD

Vendor

Progress Software

Product

LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF

External References

https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-July-2026-CVE-2026-59686-CVE-2026-59687-CVE-2026-59688-CVE-2026-59689-CVE-2026-59690

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment