Critical · CVSS 10.0Known ExploitedCVE-2024-1212

LoadMaster Pre-Authenticated OS Command InjectionCVE-2024-1212

Answer in brief

CVE-2024-1212 records a Critical severity (CVSS 10.0) vulnerability in LoadMaster Pre-Authenticated OS Command Injection. The current sources mark it as known exploited. The current feed maps kemptechnologies/loadmaster (generic), Progress Software/LoadMaster (generic), Progress Software/LoadMaster (generic). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Feb 21, 2024Updated Jul 13, 2026Source checked Nov 4, 2026First seen by HOL May 24, 2026Material review Jul 13, 2026

Upstream Advisory

Key facts

Risk: Critical · CVSS 10.0
Exploitation: Known exploited
Affected software: 3 mapped packages or products
Fix availability: Available

Why this deserves its current priority

CVSS is 10.0. Known-exploitation status makes exposure review time-sensitive. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps kemptechnologies/loadmaster (generic), Progress Software/LoadMaster (generic), Progress Software/LoadMaster (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
kemptechnologies/loadmastergeneric	>=7.2.48.1 <7.2.48.10 \|\| >=7.2.54.0 <7.2.54.8 \|\| >=7.2.55.0 <7.2.59.2	7.2.48.10, 7.2.54.8, 7.2.59.2
Progress Software/LoadMastergeneric	*	Not reported
Progress Software/LoadMastergeneric	>=7.2.48.1 <7.2.48.10 \|\| >=7.2.54.0 <7.2.54.8 \|\| >=7.2.55.0 <7.2.59.2	7.2.48.10, 7.2.54.8, 7.2.59.2

Recommended response

Check inventory. Check lockfiles and deployed manifests for kemptechnologies/loadmaster, Progress Software/LoadMaster, Progress Software/LoadMaster.
Review the reported fix. Update kemptechnologies/loadmaster to 7.2.48.10; Progress Software/LoadMaster to 7.2.48.10 if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

Published upstream
Feb 21, 2024
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Jul 13, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
May 24, 2026
Added to CISA KEV
Nov 18, 2024
Evidence: source:kev:kev:kev:record

Sources and claim methodology

Upstream source description

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.

Quoted source text, attributed separately from HOL analysis.

Why this deserves its current priority

CVSS is 10.0. Known-exploitation status makes exposure review time-sensitive. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps kemptechnologies/loadmaster (generic), Progress Software/LoadMaster (generic), Progress Software/LoadMaster (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
kemptechnologies/loadmastergeneric	>=7.2.48.1 <7.2.48.10 \|\| >=7.2.54.0 <7.2.54.8 \|\| >=7.2.55.0 <7.2.59.2	7.2.48.10, 7.2.54.8, 7.2.59.2
Progress Software/LoadMastergeneric	*	Not reported
Progress Software/LoadMastergeneric	>=7.2.48.1 <7.2.48.10 \|\| >=7.2.54.0 <7.2.54.8 \|\| >=7.2.55.0 <7.2.59.2	7.2.48.10, 7.2.54.8, 7.2.59.2

Recommended response

Check inventory. Check lockfiles and deployed manifests for kemptechnologies/loadmaster, Progress Software/LoadMaster, Progress Software/LoadMaster.

Review the reported fix. Update kemptechnologies/loadmaster to 7.2.48.10; Progress Software/LoadMaster to 7.2.48.10 if you use the affected versions. Test the change in a non-production environment first.