Ghostwire

CVE-2026-3517: OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated...

HIGH CVSS 7.5

Published: April 20, 2026 | Last Modified: April 20, 2026

Description

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “Geo Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'addcountry' command

Ghostwire Analysis — What This Means Practically

High CVSS score indicates significant risk — exploitation could lead to substantial data exposure or system compromise.
14 articles from independent security sources have covered this vulnerability, indicating significant industry attention.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (14 articles)

References

www.tenable.com/cve/CVE-2026-3517
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-3517