<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: progress-software-loadmaster</title><description>Every new CVE for progress-software-loadmaster.</description><link>https://agentprime.io/</link><item><title>CVE-2026-59690: Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API</title><link>https://agentprime.io/advisories/CVE-2026-59690/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59690/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Jul 2026 12:26:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59689: Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root</title><link>https://agentprime.io/advisories/CVE-2026-59689/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59689/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Jul 2026 12:25:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59688: Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality</title><link>https://agentprime.io/advisories/CVE-2026-59688/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59688/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Jul 2026 12:24:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59687: Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface</title><link>https://agentprime.io/advisories/CVE-2026-59687/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59687/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Jul 2026 12:23:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59686: Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface</title><link>https://agentprime.io/advisories/CVE-2026-59686/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59686/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Jul 2026 12:22:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-8037: OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager &amp; MOVEit WAF</title><link>https://agentprime.io/advisories/CVE-2026-8037/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-8037/</guid><description>CVSS 9.6 (Critical). Critical: In CISA’s KEV catalogue since 7 Aug 2026: it is known to be exploited. CVSS score 9.6: 9.0 or more. CVSS score 9.6 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Jun 2026 13:13:45 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2026-4048: OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager &amp; MOVEit WAF</title><link>https://agentprime.io/advisories/CVE-2026-4048/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-4048/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Apr 2026 13:36:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3519: OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager &amp; MOVEit WAF</title><link>https://agentprime.io/advisories/CVE-2026-3519/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3519/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Apr 2026 13:32:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3518: OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager &amp; MOVEit WAF</title><link>https://agentprime.io/advisories/CVE-2026-3518/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3518/</guid><description>CVSS 8.4 (High). Critical: CVSS score 8.4 (7.0 or more) and EPSS 0.17 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Apr 2026 13:29:33 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-3517: OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager &amp; MOVEit WAF</title><link>https://agentprime.io/advisories/CVE-2026-3517/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3517/</guid><description>CVSS 8.4 (High). Critical: CVSS score 8.4 (7.0 or more) and EPSS 0.15 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Apr 2026 13:22:54 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-13447: OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster</title><link>https://agentprime.io/advisories/CVE-2025-13447/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-13447/</guid><description>CVSS 8.4 (High). Critical: CVSS score 8.4 (7.0 or more) and EPSS 0.27 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Jan 2026 14:31:56 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-13444: OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster</title><link>https://agentprime.io/advisories/CVE-2025-13444/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-13444/</guid><description>CVSS 8.4 (High). Critical: CVSS score 8.4 (7.0 or more) and EPSS 0.27 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Jan 2026 14:26:50 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-2449: LoadMaster Cross-Site Request Forgery (CSRF)</title><link>https://agentprime.io/advisories/CVE-2024-2449/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-2449/</guid><description>CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.13 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 22 Mar 2024 13:35:39 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-2448: LoadMaster Command Injection Vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-2448/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-2448/</guid><description>CVSS 8.4 (High). Critical: CVSS score 8.4 (7.0 or more) and EPSS 0.55 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 22 Mar 2024 13:32:43 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-1212: LoadMaster Pre-Authenticated OS Command Injection</title><link>https://agentprime.io/advisories/CVE-2024-1212/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1212/</guid><description>CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 18 Nov 2024: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.95 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Feb 2024 17:39:12 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item></channel></rss>