CVE-2025-13444

Published: Jan 13, 2026Modified: Aug 10, 2026

6.8

Vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API input parameters

Affected (6)

Products: Progress: Connection Manager For Objectscale, Ecs Connection Manager, Loadmaster, Moveit Web Application Firewall, Multi Tenant Hypervisor

Progress

5 products

Connection Manager For Objectscale

Ecs Connection Manager

Loadmaster

Moveit Web Application Firewall

Multi Tenant Hypervisor

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Progress Connection Manager For Objectscale	Before 7.2.62.2
Progress Ecs Connection Manager	Before 7.2.62.2
Progress Loadmaster	Before 7.2.54.16
Progress Loadmaster	From 7.2.55.0 to 7.2.62.2
Progress Moveit Web Application Firewall	Version 7.2.62.1
Progress Multi Tenant Hypervisor	Before 7.1.35.15