CVE-2026-3519
גבוהה 7.2
תיאור (מקור, אנגלית)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'aclcontrol' command
מדדים
- CVSS 3.1
-
7.2 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 2% (אחוזון 100) נכון ל-28/7/2026
- CWE
- CWE-77
מוצרים מושפעים
progress: connection manager for objectscale; progress: ecs connection manager; progress: loadmaster
קישורים
- https://community.progress.com/s/article/LoadMaster-Security-Vulnerabilites-CV… PatchVendor Advisory