Five Progress LoadMaster Flaws Let Attackers Execute Commands and Gain Root Access

Cybersecuritynews •Abinaya • July 28, 2026

Share: View original

Progress has addressed five serious vulnerabilities affecting Kemp LoadMaster, ECS Connection Manager, and Connection Manager for ObjectScale appliances. These vulnerabilities, tracked as CVE-2026-59686 through CVE-2026-59690, impact several older product releases and could lead to complete appliance compromise when exploited by authenticated users. The company released a critical security bulletin on July 27, 2026. Progress stated […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Progress LoadMaster Allow Command Execution Five high-severity vulnerabilities have been identified in Progress LoadMaster and related systems, tracked as CVE-2026-59686 to CVE-2026-59690. These flaws could allow authenticated users to execute arbitrary commands and gain root access, potentially compromising entire appliances. The vulnerabilities affect older versions of Kemp LoadMaster, ECS Connection Manager, and ObjectScale appliances. Progress released a critical security bulletin on July 27, 2026, detailing these issues and recommending immediate updates. Currently, there are no reports of active exploitation, but the vulnerabilities pose a significant risk if left unpatched. Administrators are urged to apply the latest patches to mitigate potential attacks. The vulnerabilities were publicly disclosed on the same day as the advisory. 14 sources 72

Extracted Entities

Companies (1)

CVEs (2)

CVE-2026-59686 CVE-2026-59690

Platforms (3)

Connection Manager For ObjectScale Appliances ECS Connection Manager Kemp LoadMaster