# Progress Software Object Scale Connection Manager.

Every CVE that names Progress Software Object Scale Connection Manager among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API](https://agentprime.io/advisories/CVE-2026-59690.md)
  `CVE-2026-59690` · CVE record: Progress Software LoadMaster and 4 more · CVSS 8.0 High · Not analysed yet · Published 27 Jul 2026 · Tags: Broken access control
- [Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root](https://agentprime.io/advisories/CVE-2026-59689.md)
  `CVE-2026-59689` · CVE record: Progress Software LoadMaster and 3 more · CVSS 8.0 High · Not analysed yet · Published 27 Jul 2026 · Tags: Broken access control
- [Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality](https://agentprime.io/advisories/CVE-2026-59688.md)
  `CVE-2026-59688` · CVE record: Progress Software LoadMaster and 3 more · CVSS 8.4 High · Not analysed yet · Published 27 Jul 2026 · Tags: Command injection
- [Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface](https://agentprime.io/advisories/CVE-2026-59687.md)
  `CVE-2026-59687` · CVE record: Progress Software LoadMaster and 3 more · CVSS 8.4 High · Not analysed yet · Published 27 Jul 2026 · Tags: Command injection
- [Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface](https://agentprime.io/advisories/CVE-2026-59686.md)
  `CVE-2026-59686` · CVE record: Progress Software LoadMaster and 3 more · CVSS 8.4 High · Not analysed yet · Published 27 Jul 2026 · Tags: Command injection
- [OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF](https://agentprime.io/advisories/CVE-2026-8037.md)
  `CVE-2026-8037` · CVE record: Progress Software LoadMaster and 3 more · CVSS 9.6 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 1.00 · Not analysed yet · Published 4 Jun 2026 · Tags: Command injection
- [OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF](https://agentprime.io/advisories/CVE-2026-4048.md)
  `CVE-2026-4048` · CVE record: Progress Software LoadMaster and 3 more · CVSS 8.4 High · Not analysed yet · Published 20 Apr 2026 · Tags: Command injection
- [OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF](https://agentprime.io/advisories/CVE-2026-3519.md)
  `CVE-2026-3519` · CVE record: Progress Software LoadMaster and 3 more · CVSS 8.4 High · Not analysed yet · Published 20 Apr 2026 · Tags: Command injection
- [OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF](https://agentprime.io/advisories/CVE-2026-3518.md)
  `CVE-2026-3518` · CVE record: Progress Software LoadMaster and 3 more · CVSS 8.4 High · Critical (CVSS 7+ and EPSS) · EPSS 0.17 · Not analysed yet · Published 20 Apr 2026 · Tags: Command injection
- [OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF](https://agentprime.io/advisories/CVE-2026-3517.md)
  `CVE-2026-3517` · CVE record: Progress Software LoadMaster and 3 more · CVSS 8.4 High · Critical (CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 20 Apr 2026 · Tags: Command injection

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=progress-software-object-scale-connection-manager>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/progress-software-object-scale-connection-manager/>. Everything for agents: <https://agentprime.io/llms.txt>.