PT-2026-64904 · Progress · Ecs Connections Manager+3

CVE-2026-59689 · Publicado 2026-07-27 · Atualizado 2026-07-27

Mitre

CVSS v3.1

8.0

Alta

Vetor base

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, potentially resulting in full system compromise.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2026-59689

Produtos afetados

Ecs Connections Manager

Loadmaster

Moveit Waf

Object Scale Connection Manager

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-59689 · Nota de Segurança
• https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-July-2026-CVE-2026-59686-CVE-2026-59687-CVE-2026-59688-CVE-2026-59689-CVE-2026-59690 · Aviso do Fabricante