MW
Product
MOVEit WAF
by Progress Software · last CVE Jul 27, 2026
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 0Low 0
Watch

Add MOVEit WAF to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-8037
In wildKEV
9.8
100%
Jun 4
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
Affected: V7.2.60.0 before V7.2.63.2
Showing 1