A vulnerability has been found in Progress LoadMaster, ECS Connections Manager, Object Scale Connection Manager and MOVEit WAF and classified as critical. This affects an unknown part of the component UI. Performing a manipulation results in command injection.
This vulnerability is known as CVE-2026-4048. Access to the local network is required for this attack. No exploit is available.
The affected component should be upgraded.
