Progress Software · product
LoadMaster
26 CVEs · 2 exploited
Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- exploited in the wild
- 2
- check available
- 1
- likely to be exploited
- 6
Every one of the 26 is a mark on the map. Named now: 1 to 26, most at risk first.
- Progress ADC LoadMaster - Command Injection
- Progress Kemp LoadMaster - Command Injection
- Kemp LoadMaster Load Balancer - Unauthenticated Command Injection
- LoadMaster Command Injection Vulnerability
- OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster
- OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster
- OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
- OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
- LoadMaster Cross-Site Request Forgery (CSRF)
- Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects: * LoadMaster: 7.2.40.0 and above * ECS: All versions * Multi-Tenancy: 7.…
- OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
- OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
- Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality
- Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface
- Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface
- Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.
- LoadMaster Hardcoded SSH Key
- LoadMaster Reversible Password Encryption Algorithm
- Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API
- Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.