← Database

CVE-2026-8037

CRITICAL CVSS: 9.6 Published: 2026-06-04 Modified: 2026-08-10

Description

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints

Affected Platforms

Progress LoadmasterProgress Connection Manager For ObjectscaleProgress Ecs Connection ManagerProgress Moveit Web Application Firewall

Weakness Type

CWE-77

References