CVE-2026-59690
Missing authorization in Progress Ecs Connection Manager
CVSS score
8.0
EPSS probability
%0.3
Risk score
0.0
Published
2 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks
This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an intruder around. Public systems, package feeds, hotel networks, and login flows all gave away more than intended. Some of it was clever. Most of it was just access left lying around: old bugs, exposed gear, poisoned dependencies, weak defaults, and tooling that moved from
Similar Vulnerabilities
9.8
CVE-2024-1212 Actively exploitedOS command injection in Progress Loadmaster
Patch status unknown Public Exploits:3EPSS %95
9.8
CVE-2017-11357 Actively exploitedVulnerability in N/a
Workaround Public Exploits:2EPSS %78
9.6
6.8
CVE-2025-13444OS command injection in Progress Loadmaster
Patch status unknownEPSS %27
8.8
CVE-2014-5287Vulnerability in Progress Loadmaster
Patch status unknown Public Exploits:3EPSS %8
6.1
CVE-2021-41318Cross-site scripting in Progress Whatsup Gold
Patch status unknown Public Exploits:2EPSS %6
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-59690"