Progress Loadmaster — known CVE vulnerabilities

Every CVE whose affected-product data names Progress Loadmaster, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (19)

• CVE-2024-1212 — CVSS 10.0 (critical) — actively exploited: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command…
• CVE-2024-2448 — CVSS 8.4 (high): An OS command injection vulnerability has been identified in LoadMaster. An authenticated UI user with any permission settings may be able…
• CVE-2026-4048 — CVSS 8.4 (high): OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All”…
• CVE-2025-13447 — CVSS 8.4 (high): OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User…
• CVE-2026-3517 — CVSS 8.4 (high): OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “Geo…
• CVE-2026-3518 — CVSS 8.4 (high): OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “All”…
• CVE-2026-3519 — CVSS 8.4 (high): OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS…
• CVE-2024-56131 — CVSS 8.4 (high): Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects…
• CVE-2024-56132 — CVSS 8.4 (high): Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects…
• CVE-2024-56133 — CVSS 8.4 (high): Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects…
• CVE-2024-56134 — CVSS 8.4 (high): Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects…
• CVE-2024-56135 — CVSS 8.4 (high): Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects…
• CVE-2024-6658 — CVSS 8.4 (high): Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.This issue affects…
• CVE-2024-8755 — CVSS 8.4 (high): Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.This issue affects…
• CVE-2025-13444 — CVSS 8.4 (high): OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User…
• CVE-2024-3544 — CVSS 7.5 (high): Unauthenticated attackers can perform actions, using SSH private keys, by knowing the IP address and having access to the same network of…
• CVE-2024-2449 — CVSS 7.5 (high): A cross-site request forgery vulnerability has been identified in LoadMaster. It is possible for a malicious actor, who has prior knowledge…
• CVE-2024-3543 — CVSS 6.4 (medium): Use of reversible password encryption algorithm allows attackers to decrypt passwords. Sensitive information can be easily unencrypted by…
• CVE-2025-1758 — CVSS 4.3 (medium): Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects: * LoadMaster: 7.2.40.0 and above…