What’s Vulnerable › Products

Progress Software ECS Connection Manager vulnerabilities

12 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your Progress Software ECS Connection Manager version is affected

Exploited Progress Software ECS Connection Manager vulnerabilities

• CVE-2026-8037 — Progress LoadMaster Command Injection Vulnerability

Latest Progress Software ECS Connection Manager vulnerabilities

• CVE-2026-59690 — Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API (CVSS 8.0)
• CVE-2026-59689 — Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root (CVSS 8.0)
• CVE-2026-59688 — Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality (CVSS 8.4)
• CVE-2026-59687 — Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface (CVSS 8.4)
• CVE-2026-59686 — Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface (CVSS 8.4)
• CVE-2026-8037 — Progress LoadMaster Command Injection Vulnerability (CVSS 9.8) — exploited
• CVE-2026-4048 — OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF (CVSS 7.2)
• CVE-2026-3519 — OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF (CVSS 7.2)
• CVE-2026-3518 — OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF (CVSS 7.2)
• CVE-2026-3517 — OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF (CVSS 7.2)
• CVE-2025-13447 — OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster (CVSS 6.8)
• CVE-2025-13444 — OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster (CVSS 6.8)