Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'aclcontrol' command
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-20 | 1 | Disclosure1 |
| 2026-04-22 | 1 | Patch1 |
| 2026-04-24 | 2 | General1Patch1 |
| 2026-06-02 | 1 | Disclosure1 |
⚠️ Vulnerabilidades en productos Progress ❗ CVE-2026-3519 ❗ CVE-2026-3518 ❗ CVE-2026-3517 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-progress-2/ https://t.co/YjYiDtjdwh
Post summary
The post lists three CVEs for Progress products and supplies a link for additional information, but it contains no technical details, patch info, or evidence of exploitation.
MOVEit WAF Critical Security Bulletin – April 2026 – (CVE-2026-3517, CVE-2026-3518, CVE-2026-3519, CVE-2026-4048, CVE-2026-21876) http://dlvr.it/TSqvhx #cyber #threathunting #infosec
Post summary
A security bulletin announces several CVEs for MOVEit WAF, but the provided text offers no additional technical, exploitation, or mitigation information.
Progress Patches Multiple Vulnerabilities in MOVEit WAF, LoadMaster. The defects exploit remote code execution, OS command injection, and WAF detection bypass. Two of the bugs, CVE-2026-3517 and CVE-2026-3519, impact APIs in Progress ADC products. https://www.securityweek.com/progress-patches-multiple-vulnerabilities-in-moveit-waf-loadmaster/ https://t.co/whIku7lRsU
Post summary
Progress released patches for multiple MOVEit WAF and LoadMaster vulnerabilities (CVE-2026-3517, CVE-2026-3519) affecting APIs with remote code execution, OS command injection, and WAF detection bypass.
Warning: Progress patches multiple critical vulnerabilities in MOVEit WAF and Progress Kemp LoadMaster! This includes CVE-2026-21876 which allows attackers to bypass the WAF! More info: https://community.progress.com/s/article/MOVEit-WAF-Critical-Security-Bulletin-April-2026-CVE-2026-3517-CVE-2026-3518-CVE-2026-3519-CVE-2026-4048-CVE-2026-21876 #patch #patch #patch
Post summary
Progress has released patches for several critical MOVEit WAF vulnerabilities, including CVE-2026-21876 which enables WAF bypass, with details available at the provided link.
CVE-2026-3517 CVE-2026-3519 Progress LoadMaster API flaws enable authenticated OS command injection -- https://cvefeed.io/vuln/detail/CVE-2026-3517 -- https://cvefeed.io/vuln/detail/CVE-2026-3519
Post summary
The post announces that Progress LoadMaster API flaws CVE-2026-3517 and CVE-2026-3519 allow authenticated users to execute OS command injection.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | progress | connection_manager_for_objectscale | - | - | - |
| App | progress | ecs_connection_manager | - | - | - |
| App | progress | loadmaster | - | - | - |
| App | progress | loadmaster | - | - | - |