PT-2026-64905 · Progress · Ecs Connections Manager+4

CVE-2026-59690 · Publicado 2026-07-27 · Atualizado 2026-07-27

Mitre

CVSS v3.1

8.0

Alta

Vetor base

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged administrative operations via the REST API that should not be accessible to their permission level, potentially resulting in a system compromise.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-59690

Produtos afetados

Ecs Connections Manager

Loadmaster

Moveit Waf

Multi Tenant

Object Scale Connection Manager

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-59690 · Nota de Segurança
• https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-July-2026-CVE-2026-59686-CVE-2026-59687-CVE-2026-59688-CVE-2026-59689-CVE-2026-59690 · Aviso do Fabricante