← CVE Intelligence

CVE-2026-59689

Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root PUBLISHED

Description (CNA)

An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, potentially resulting in full system compromise.

Affected (CNA)

Vendor / productVersions
Progress Software / LoadMasteraffected 7.2.36 before 7.2.63.3; affected 7.2.36 before 7.2.54.19
Progress Software / ECS Connection Manageraffected 7.2.60.0 before 7.2.63.3
Progress Software / Object Scale Connection Manageraffected 7.2.60.0 before 7.2.63.3
Progress Software / MOVEit WAFaffected 7.2.60.0 before 7.2.63.3

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.