CVE-2024-1212

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 10/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution.

CISA Known Exploited Vulnerability

Vendor / Product Progress — Kemp LoadMaster
Date Added 2024-11-18
Remediation Due 2024-12-09
https://community.progress.com/s/article/Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212 ; https://nvd.nist.gov/vuln/detail/CVE-2024-1212

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
progress loadmaster 7.2.48.1 – 7.2.48.10
progress loadmaster 7.2.54.0 – 7.2.54.8
progress loadmaster 7.2.55.0 – 7.2.59.2

Bug Bounty Relevance

10 / 100
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

Unscored

EPSS — Exploitation Probability

95.39%
Raw Score 0.953880
Percentile 99.9%
Date 2026-10-28

Intelligence Sources

kev ref →