CVE-2026-59686

Name of the Vulnerable Software and Affected Versions Progress Software LoadMaster (affected versions not specified) Progress ECS Connection Manager (affected versions not specified) Progress Object Scale Connection Manager (affected versions not specified) Progress MOVEit WAF (affected versions not specified)

Description An OS Command Injection issue exists in the management interface of the affected appliances. This allows an authenticated attacker with high privileges to execute arbitrary operating system commands, which could lead to a complete system compromise. OS Command Injection is a flaw where an application passes unsafe user-supplied data to a system shell, allowing the execution of unauthorized commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.