CVE 8.4 HIGH

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster_CVE-2025-13444

8.4 / 10
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API input parameters

Basic Information

ID CVE-2025-13444
Source ProgressSoftware
Published Jan 13, 2026 at 14:26

Affected Product

Vendor Progress Software
Product LoadMaster
Version 7.2.50
Affected Versions Progress Software LoadMaster 7.2.50
Progress Software LoadMaster 7.2.50
Progress Software Multi Tenant LoadMaster 7.2.39

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.