progress loadmaster

Name: progress loadmaster
Brand: progress

productUS

cpe:2.3:o:progress:loadmaster:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical2high7medium0low

updated 2026-10-27

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-8037US	critical9.8OT critical	99.8% (100th)	KEV	7.2.54.18	2026-06-04	2 versions
CVE-2024-1212US	critical9.8OT critical	95.4% (100th)	KEV	7.2.54.8	2024-02-21	3 versions
CVE-2014-5287US	high8.8	8.00% (95th)	Exploit	no fix	2020-01-08	≤ 7.1-16
CVE-2025-13444US	medium6.8	27.2% (98th)	—	7.2.54.16	2026-01-13	2 versions
CVE-2024-56132US	medium6.8	6.29% (94th)	—	7.2.61.0	2025-02-05	3 versions
CVE-2024-56131US	medium6.8	6.12% (93rd)	—	7.2.54.13	2025-02-05	3 versions
CVE-2025-1758US	high8.8	4.94% (92nd)	—	7.2.61.1	2025-03-19	7.2.40.0 → 7.2.61.1
CVE-2026-59688US	—	1.68% (77th)	—	7.2.54.19	2026-07-27	2 versions
CVE-2026-59687US	—	1.68% (77th)	—	7.2.63.3	2026-07-27	2 versions
CVE-2026-59686US	—	1.68% (77th)	—	7.2.63.3	2026-07-27	2 versions
CVE-2024-8755US	critical9.8	1.17% (67th)	—	7.2.61.0	2024-10-11	3 versions
CVE-2024-56135US	medium6.8	0.60% (49th)	—	7.2.61.0	2025-02-05	3 versions
CVE-2024-56134US	medium6.8	0.60% (49th)	—	7.2.61.0	2025-02-05	3 versions
CVE-2024-56133US	medium6.8	0.60% (49th)	—	7.2.54.13	2025-02-05	3 versions
CVE-2024-6658US	medium6.8	0.55% (46th)	—	7.2.54.12	2024-09-12	3 versions
CVE-2026-59690US	—OT elevated	0.26% (17th)	—	7.2.63.3	2026-07-27	2 versions
CVE-2026-59689US	—OT elevated	0.26% (17th)	—	7.2.63.3	2026-07-27	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation7 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')7 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')1 CVEs
CWE-862Missing Authorization1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.