CVE-2026-59688
Serial Number: AV26-755 Date: July 28, 2026 As of July 27, 2026, Progress Software is affected by vulnerabilities in the following products: ECS Connection Manager Prior to 7.2.63.3 LoadMaster Prior to 7.2.54.19 Prior to 7.2.63.3 MOVEit WAF Prior to 7.2.63.3 Multi Tenant Prior to 7.1.35.16 Object Scale Connection Manager Prior to 7.2.63.3 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. LoadMaster Critical Security Bulletin – July 2026 – (CVE-2026-59686, CVE-2026-59687, CVE-2026-59688, CVE-2026-59689, CVE-2026-59690)
CSIRTS triage
- What
- Progress Software products have vulnerabilities that could potentially be exploited.
- Who is affected
- Users and administrators of ECS Connection Manager, LoadMaster, MOVEit WAF, Multi Tenant, and Object Scale Connection Manager prior to specified versions.
- Urgency
- Remediation is necessary as vulnerabilities could be exploited, although the severity is currently unknown.
- Action
- Users should apply updates as they become available.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-59688
Get an email if CVE-2026-59688 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.72% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 50% of all EPSS-scored CVEs.
Advisory coverage (3)
- criticalProgress security advisory (AV26-755)cccs · 2026-07-28
- high[NEW] [high] Progress Software LoadMaster and MOVEit WAF: Multiple vulnerabilitiescert-bund · 2026-07-28
- highCVE-2026-59688: An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager,…nvd · 2026-07-27
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-59688)