CVE-2026-59687

Name of the Vulnerable Software and Affected Versions Progress Software LoadMaster (affected versions not specified) Progress Software ECS Connection Manager (affected versions not specified) Progress Software Object Scale Connection Manager (affected versions not specified) Progress Software MOVEit WAF (affected versions not specified)

Description An OS Command Injection issue exists in the Geo Location management interface. This allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance, which could lead to a complete system compromise. OS Command Injection is a flaw where an application executes unintended commands on the host operating system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.