CVE-2025-13447high

CVE-2025-13447: high-severity vulnerability in Progress Software LoadMaster

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster

Published · Updated

Follow this CVE+ Monitor LoadMaster

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

26Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.4epss 27%
OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API input parameters
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected products
Progress Software · LoadMaster
Related CVEs — Progress Software LoadMaster

In the same product, most dangerous first.

CVE-2026-8037CRITICALOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFEPSS 99.8%KEVCVE-2024-1212CRITICALLoadMaster Pre-Authenticated OS Command InjectionEPSS 95.4%KEVCVE-2024-2448HIGHLoadMaster Command Injection VulnerabilityEPSS 55.4%CVE-2025-13444HIGHOS Command Injection Remote Code Execution Vulnerability in Progress LoadMasterEPSS 27.2%CVE-2026-3518HIGHOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFEPSS 16.9%CVE-2026-3517HIGHOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFEPSS 15.5%