CVE-2026-59689: Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root
An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, potentially resulting in full system compromise.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-59689?
The severity of CVE-2026-59689 is rated as high, with a CVSS score of 8.
How do I fix CVE-2026-59689?
To fix CVE-2026-59689, upgrade to the latest version of affected software as provided by Progress Software.
What type of vulnerability is CVE-2026-59689?
CVE-2026-59689 is classified as an Improper Authorization vulnerability.
Which products are affected by CVE-2026-59689?
CVE-2026-59689 affects Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF.
What could be the consequence of exploiting CVE-2026-59689?
Exploiting CVE-2026-59689 could allow an authenticated attacker to escalate privileges to root, potentially compromising the entire system.