[CVE-2026-8037] OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an u…

Descripción técnica

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints

Puntuación CVSS

Score: 9.6/10 — Severidad: CRITICAL — Estado NIST: Analyzed

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Productos afectados

Connection manager for objectscale, Ecs connection manager, Loadmaster — Progress

Debilidades (CWE)

CWE-77

Fuente oficial

Publicado en NIST NVD.