What’s Vulnerable › Products

Progress Moveit Web Application Firewall vulnerabilities

7 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Progress Moveit Web Application Firewall version is affected

Exploited Progress Moveit Web Application Firewall vulnerabilities

• CVE-2026-8037 — Progress LoadMaster Command Injection Vulnerability

Latest Progress Moveit Web Application Firewall vulnerabilities

• CVE-2026-59690 — Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API (CVSS 8.0)
• CVE-2026-59689 — Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root (CVSS 8.0)
• CVE-2026-59688 — Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality (CVSS 8.4)
• CVE-2026-59687 — Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface (CVSS 8.4)
• CVE-2026-59686 — Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface (CVSS 8.4)
• CVE-2026-8037 — Progress LoadMaster Command Injection Vulnerability (CVSS 9.8) — exploited
• CVE-2025-13444 — OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster (CVSS 6.8)