PT-2026-64904 · Progress · Ecs Connections Manager+3

CVE-2026-59689 · Published 2026-07-27 · Updated 2026-07-27

Mitre

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, potentially resulting in full system compromise.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-59689

Affected Products

Ecs Connections Manager

Loadmaster

Moveit Waf

Object Scale Connection Manager

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-59689 · Security Note
• https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-July-2026-CVE-2026-59686-CVE-2026-59687-CVE-2026-59688-CVE-2026-59689-CVE-2026-59690 · Vendor Advisory