← Database

CVE-2025-13444

HIGH CVSS: 8.4 Published: 2026-01-13 Modified: 2026-08-10

Description

OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API input parameters

Affected Platforms

Progress Multi-Tenant HypervisorProgress Ecs Connection ManagerProgress Moveit Web Application FirewallProgress LoadmasterProgress Connection Manager For Objectscale

Weakness Type

CWE-78

References