https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:54:38.435437+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1011 certfr-2026-avi-1011 — De multiples vulnérabilités ont été découvertes dans Progress MOVEit WAF. Certaines d'entre elles permettent à un attaq… 2026-10-03T01:54:38.484227+00:00 certfr-2026-avi-1011 https://cve.radiocsirt.org/vuln/euvd-2026-341822 EUVD-2026-341822 2026-10-03T01:54:38.484273+00:00 EUVD-2026-341822 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59690 fkie_cve-2026-59690 2026-10-03T01:54:38.484288+00:00

A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged administrative operations via the REST API that should not be accessible to their permission level, potentially resulting in a system compromise.

 https://cve.radiocsirt.org/vuln/ghsa-68jj-c942-f24v GHSA-68jj-c942-f24v 2026-10-03T01:54:38.484319+00:00

A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged administrative operations via the REST API that should not be accessible to their permission level, potentially resulting in a system compromise.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2544 WID-SEC-W-2026-2544 — Progress Software LoadMaster und MOVEit WAF: Mehrere Schwachstellen 2026-10-03T01:54:38.484337+00:00

Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Progress Software LoadMaster und Progress Software MOVEit ausnutzen, um beliebigen Programmcode auszuführen und Root-Rechte zu erlangen.