Vulnerability intelligence
CVE-2026-59686
An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the management interface, potentially resulting in complete system compromise.
CVSS Score
8.4
High
EPSS — Exploit Probability
1.7%
Riskier than 76% of all CVEs · checked 2026-10-17
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
No linked coverage yet. CyberSIXT tracks this CVE and coverage will appear here.