MW
Product
Moveit Web Application Firewall
On CISA KEVExploited in the wild
7
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 1Low 0
Watch
Add Moveit Web Application Firewall to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59688 | 8.4 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality Affected: before 7.2.63.3 |
| CVE-2026-59687 | 8.4 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface Affected: before 7.2.63.3 |
| CVE-2026-59686 | 8.4 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface Affected: before 7.2.63.3 |
| CVE-2026-59690 | 8.0 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API Affected: before 7.2.63.3 |
| CVE-2026-59689 | 8.0 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root Affected: before 7.2.63.3 |
Showing 5