What’s Vulnerable › Products

Progress Connection Manager For Objectscale vulnerabilities

11 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your Progress Connection Manager For Objectscale version is affected

Exploited Progress Connection Manager For Objectscale vulnerabilities

• CVE-2026-8037 — Progress LoadMaster Command Injection Vulnerability

Latest Progress Connection Manager For Objectscale vulnerabilities

• CVE-2026-59690 — Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API (CVSS 8.0)
• CVE-2026-59689 — Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root (CVSS 8.0)
• CVE-2026-59688 — Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality (CVSS 8.4)
• CVE-2026-59687 — Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface (CVSS 8.4)
• CVE-2026-59686 — Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface (CVSS 8.4)
• CVE-2026-8037 — Progress LoadMaster Command Injection Vulnerability (CVSS 9.8) — exploited
• CVE-2026-4048 — OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF (CVSS 7.2)
• CVE-2026-3519 — OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF (CVSS 7.2)
• CVE-2026-3518 — OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF (CVSS 7.2)
• CVE-2026-3517 — OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF (CVSS 7.2)
• CVE-2025-13444 — OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster (CVSS 6.8)