Progress Security Updates – 08 June 2026

The addressed vulnerabilities could allow the attacker to obtain sensitive information, modify account properties of other users, or execute arbitrary code on the affected system.

Sample of the addressed vulnerabilities:

1. Progress Sitefinity Insufficiently Protected Credentials in Web Services Vulnerability (CVE-2026-7312):

• CVSS: 10
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Obtain Information

2. Progress LoadMaster Command Injection Remote Code Execution Vulnerability (CVE-2026-8037):

• CVSS: 9.6
• Attack Vector: Adjacent Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Remote Code Execution

The affected products:

• Progress Sitefinity CMS and Sitefinity Insight.
• Progress LoadMaster.