Skip to content
Threat Feed

Vendor

Progress Software

5 briefs RSS
medium advisory

Progress Software Security Advisory Addresses Multiple Vulnerabilities

Progress Software has issued a security advisory (AV26-755) addressing multiple vulnerabilities, identified by CVEs CVE-2026-59686 through CVE-2026-59690, across several of its products including ECS Connection Manager, LoadMaster, MOVEit WAF, Multi Tenant, and Object Scale Connection Manager, with specific versions prior to various patch levels being vulnerable, urging administrators to apply necessary updates to secure their systems.

ECS Connection Manager < 7.2.63.3 +4 vulnerability cve security-advisory patch-management
5c
critical advisory

Progress Software LoadMaster and MOVEit WAF Vulnerabilities Lead to RCE and Root Privileges

Multiple vulnerabilities have been identified in Progress Software LoadMaster and MOVEit WAF products, allowing an attacker from an adjacent network to execute arbitrary program code and gain root privileges on the affected systems.

LoadMaster +1 progress-software moveit waf rce privilege-escalation network-security
3t
high threat

Multiple Vulnerabilities in Progress Software MOVEit Transfer

Multiple vulnerabilities in Progress Software MOVEit Transfer allow attackers to bypass security measures, achieve elevated privileges, and manipulate or disclose sensitive data, including the ability to perform Cross-Site-Scripting (XSS) attacks.

exploited MOVEit Transfer vulnerability moveit file-transfer data-exfiltration privilege-escalation web-application
4t
high advisory

Kemp LoadMaster and Progress Software MOVEit WAF: Multiple Vulnerabilities

Multiple vulnerabilities in Kemp LoadMaster and Progress Software MOVEit WAF could allow an attacker to execute arbitrary code or circumvent security measures.

LoadMaster +1 vulnerability code-execution security-bypass
2r 2t
critical threat

Critical Authentication Bypass Vulnerability in MOVEit Automation (CVE-2026-4670)

A critical authentication bypass vulnerability (CVE-2026-4670) in Progress MOVEit Automation allows an unauthenticated remote attacker to gain administrative access, potentially leading to full control over the application and sensitive file transfer workflows.

exploited MOVEit Automation +3 authentication-bypass privilege-escalation cve-2026-4670 cve-2026-5174 webserver
2r 2t 2c