Loadmaster
Approved changes feed: RSS · Atom
cpe:2.3:a:progress:loadmaster:*:*:*:*:ltsf:*:*:*
part: a version: * update: *
| Vendor | Progress (f9d80521-f73f-5a85-8df9-9306f2f67809) |
|---|---|
| Product | Loadmaster (461d78a5-017f-532b-8e4c-b055948a7b66) |
| Edition | * |
| Language | * |
| Software edition | ltsf |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4048 |
vulnerable | 2026-06-08 08:05:12.537549 |
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in a custom WAF rule file during the file upload process.
Published: 2026-04-20T13:36:49.475Z
Updated: 2026-04-22T03:55:54.495Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3519 |
vulnerable | 2026-06-08 08:01:18.911074 |
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'aclcontrol' command
Published: 2026-04-20T13:32:50.259Z
Updated: 2026-04-22T03:55:53.355Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3518 |
vulnerable | 2026-06-08 08:01:18.906455 |
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'killsession' command
Published: 2026-04-20T13:29:33.794Z
Updated: 2026-04-22T03:55:52.242Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3517 |
vulnerable | 2026-06-08 08:01:18.904839 |
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “Geo Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'addcountry' command
Published: 2026-04-20T13:22:54.867Z
Updated: 2026-04-22T03:55:51.123Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13447 |
vulnerable | 2026-06-08 07:04:32.216088 |
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API input parameters
Published: 2026-01-13T14:31:56.911Z
Updated: 2026-02-26T15:04:45.811Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13444 |
vulnerable | 2026-06-08 07:04:32.207826 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3544 |
vulnerable | 2026-06-08 06:41:53.556313 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3543 |
vulnerable | 2026-06-08 06:41:53.553056 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2449 |
vulnerable | 2026-06-08 06:33:31.139882 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2448 |
vulnerable | 2026-06-08 06:33:31.136247 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.