Progress Multi-Tenant LoadMaster vulnerabilities

8 CVEs affecting Progress Multi-Tenant LoadMaster, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-59690, published 2026-07-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-56132, published 2025-02-05. Medium severity, CVSS 6.8. EPSS: 6.3% chance of exploitation in the next 30 days. Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster…
CVE-2024-56131, published 2025-02-05. Medium severity, CVSS 6.8. EPSS: 6.1% chance of exploitation in the next 30 days. Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster…
CVE-2025-1758, published 2025-03-19. High severity, CVSS 8.8. EPSS: 4.8% chance of exploitation in the next 30 days. Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects: * LoadMaster: 7.2.40.0 and above * ECS: All versions * Multi-Tenancy: 7.1.35.4 and above
CVE-2024-56135, published 2025-02-05. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster…
CVE-2024-56134, published 2025-02-05. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster…
CVE-2024-56133, published 2025-02-05. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster…
CVE-2024-6658, published 2024-09-12. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.This issue affects:  Product Affected Versions LoadMaster From…
CVE-2026-59690, published 2026-07-27. High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days. A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low…