Progress security advisory (AV26-371)

Serial number: AV26-371
Date: April 20, 2026

On April 20, 2026, Progress published security advisories to address vulnerabilities in the following products:

• Progress Kemp LoadMaster – version GA v7.2.62.2 and prior
• Progress Kemp LoadMaster – version LTSF v7.2.54.16 and prior
• Progress MOVEit WAF – version GA v7.2.62.2 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• LoadMaster Security Vulnerabilites: CVE-2026-3517 / CVE-2026-3518 / CVE-2026-3519 / CVE-2026-4048 / CVE-2026-21876
• MOVEit WAF Critical Security Bulletin – April 2026 – (CVE-2026-3517, CVE-2026-3518, CVE-2026-3519, CVE-2026-4048, CVE-2026-21876)