Loadmaster
Approved changes feed: RSS · Atom
cpe:2.3:a:progress_software:loadmaster:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Progress Software (96c4320b-2c72-5331-bd5a-d39d72393793) |
|---|---|
| Product | Loadmaster (9e76e6b5-9965-5a64-8791-1e488a30da8d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-8037 |
vulnerable | 2026-06-08 08:08:57.971694 |
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
CRITICAL (9.6)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints
Published: 2026-06-04T13:13:45.793Z
Updated: 2026-07-01T03:55:43.480Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4048 |
vulnerable | 2026-06-08 08:05:12.531501 |
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in a custom WAF rule file during the file upload process.
Published: 2026-04-20T13:36:49.475Z
Updated: 2026-04-22T03:55:54.495Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3519 |
vulnerable | 2026-06-08 08:01:18.910467 |
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'aclcontrol' command
Published: 2026-04-20T13:32:50.259Z
Updated: 2026-04-22T03:55:53.355Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3518 |
vulnerable | 2026-06-08 08:01:18.906292 |
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'killsession' command
Published: 2026-04-20T13:29:33.794Z
Updated: 2026-04-22T03:55:52.242Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3517 |
vulnerable | 2026-06-08 08:01:18.899487 |
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “Geo Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'addcountry' command
Published: 2026-04-20T13:22:54.867Z
Updated: 2026-04-22T03:55:51.123Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13447 |
vulnerable | 2026-06-08 07:04:32.214206 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13444 |
vulnerable | 2026-06-08 07:04:32.203657 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2449 |
vulnerable | 2026-06-08 06:33:31.140756 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2448 |
vulnerable | 2026-06-08 06:33:31.135504 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1212 |
vulnerable | 2026-06-08 06:25:39.569235 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.