Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Progress Software
Loadmaster

Progress Software LoadMaster Vulnerabilities: CVEs, CISA KEV & Security Advisories

Progress Software

10 CVEs

1 in CISA KEV

Progress Software LoadMaster Vulnerabilities

CVE security advisories and vulnerability history for LoadMaster by Progress Software.

10

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

1

Public exploits

With known exploit

8.6

Avg CVSS

2024–2026

Last updated June 4, 2026

Overview

Progress Software LoadMaster has 10 published CVE records since 2024, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Progress Software LoadMaster, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include ECS Appliance, Linux, LoadMaster Appliance, MOVEit WAF Appliance, ObjectScale Appliance.

Severity and exploitation

How the CVSS severity of Progress Software LoadMaster's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High8

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

1

One of Progress Software LoadMaster's CVEs is confirmed exploited in the wild.

Public exploits

1

One of Progress Software LoadMaster's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Progress Software LoadMaster version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

V7.2.63.04 CVEs
7.1.35.11 (LoadMaster MT)2 CVEs
7.2.48.11 (LoadMaster LTS)2 CVEs
7.2.54.9 ( LoadMaster LTSF)2 CVEs
7.2.59.3 ( LoadMaster GA)2 CVEs
V7.2.54.162 CVEs
V7.2.62.22 CVEs
7.2.48.101 CVE
7.2.54.81 CVE
7.2.59.21 CVE
V7.2.54.181 CVE
V7.2.63.21 CVE

Default status

All versions3 CVEs

Find a version

10 CVEs

Sort

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
CVE-2026-8037
Patch
Workaround
CWE-77
Critical · CVSS 9.6
EPSS 0.3% (54th pct)2026-06-04
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
CVE-2026-4048
Patch
CWE-77
High · CVSS 8.4
EPSS 0.0% (9th pct)2026-04-20
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
CVE-2026-3519
Patch
CWE-77
High · CVSS 8.4
EPSS 0.0% (13th pct)2026-04-20
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
CVE-2026-3518
Patch
CWE-77
High · CVSS 8.4
EPSS 0.2% (42th pct)2026-04-20
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
CVE-2026-3517
Patch
CWE-77
High · CVSS 8.4
EPSS 0.3% (51th pct)2026-04-20
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster
CVE-2025-13447
Patch
High · CVSS 8.4
EPSS 0.2% (36th pct)2026-01-13
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster
CVE-2025-13444
Patch
High · CVSS 8.4
EPSS 0.1% (16th pct)2026-01-13
High vulnerability · 2024-03-22
CVE-2024-2449
Patch
CWE-352
High · CVSS 7.5
EPSS 3.3% (88th pct)2024-03-22
LoadMaster Command Injection Vulnerability
CVE-2024-2448
Patch
CWE-78
High · CVSS 8.4
EPSS 44.8% (98th pct)2024-03-22
LoadMaster Pre-Authenticated OS Command Injection
CVE-2024-1212
CISA KEV
Public exploit
Patch
CWE-78
Added to CISA KEV 2024-11-18
Critical · CVSS 10.0
EPSS 94.3% (100th pct)2024-02-21

Common weakness types

The CWE weakness categories most often found in Progress Software LoadMaster CVEs. Follow any weakness for its full explanation.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')5 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVE

Disclosure activity by year

How many Progress Software LoadMaster CVEs were published each year.

2024

3

2026

7

Other Progress Software products

Browse vulnerabilities for other products by Progress Software.

Flowmon6 CVEs MOVEit Automation6 CVEs ECS Connections Manager5 CVEs MOVEit WAF5 CVEs Object Scale Connection Manager5 CVEs Sitefinity5 CVEs Telerik Reporting5 CVEs Telerik UI for WPF5 CVEs

All Progress Software vulnerabilities

Frequently asked questions

Common questions about Progress Software LoadMaster vulnerabilities.

How many CVEs does Progress Software LoadMaster have?

Progress Software LoadMaster has 10 published CVE records since 2024.

How many Progress Software LoadMaster CVEs are in CISA KEV?

Yes — 1 of Progress Software LoadMaster's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for Progress Software LoadMaster vulnerabilities?

Yes — 1 of Progress Software LoadMaster's CVEs have a known public exploit.

Which versions of Progress Software LoadMaster are affected?

13 distinct Progress Software LoadMaster versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Progress Software LoadMaster CVEs?

Progress Software LoadMaster's CVEs most often map to these CWE weakness types: CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-352 (Cross-Site Request Forgery (CSRF)).

How many critical Progress Software LoadMaster vulnerabilities are there?

Progress Software LoadMaster has 2 critical and 8 high-severity CVEs.

What is the average severity of Progress Software LoadMaster CVEs?

The average CVSS base score across Progress Software LoadMaster's scored CVEs is 8.6.

References

All Progress Software vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Progress Software LoadMaster vulnerabilities

Monitor new Progress Software LoadMaster vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References