Product by Progress
Progress MOVEit Web Application Firewall (WAF)
7 known vulnerabilities in Progress MOVEit Web Application Firewall (WAF) (Progress), 1 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-8037 | Progress LoadMaster Command Injection Vulnerability In CISA KEValso in 7 other products | 9.6 | |
| High | CVE-2025-13444 | OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster | 8.4 | |
| High | CVE-2026-59688 | Progress Software LoadMaster: OS Command Injection | 8.4 | |
| High | CVE-2026-59687 | Progress Software LoadMaster: OS Command Injection | 8.4 | |
| High | CVE-2026-59686 | Progress Software LoadMaster: OS Command Injection | 8.4 | |
| High | CVE-2026-59690 | Progress Software LoadMaster: Missing Authorization | 8.0 | |
| High | CVE-2026-59689 | Progress Software LoadMaster: Incorrect Authorization | 8.0 |
News
- Progress Kemp LoadMaster Flaw Exploited; SonicWall SMA1000 Flaws Exploited in Ransomwaresans-newsbites-mail,
- Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attemptsthehackernews,
- Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attemptsthehackernews,
- Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auththehackernews,
- Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037)watchtowr-labs,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 23sans-atrisk-mail,