High severity8.4NVD Advisory· Published Mar 22, 2024· Updated Jun 17, 2026

CVE-2024-2448

Description

An OS command injection vulnerability has been identified in LoadMaster. An authenticated UI user with any permission settings may be able to inject commands into a UI component using a shell command resulting in OS command injection.

Affected products

Kemp/LoadMasterllm-create
LoadMaster/LoadMasterllm-create
Progress Software/LoadMasterv5
Range: 7.2.55.0

Patches

Vulnerability mechanics

References

progress.com/loadmasternvdBroken Link
support.kemptechnologies.com/hc/en-us/articles/25119767150477-LoadMaster-Security-Vulnerabilities-CVE-2024-2448-and-CVE-2024-2449nvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.546
epss	0.044
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000