Ecs Connection Manager EUVD-2026-49186

We need to produce a JSON object with all the specified fields. Let's analyze the input data:

CVE ID: CVE-2026-59688 Description: "An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the backup restore functionality, potentially resulting in complete system compromise." CVSS Score: 8.4 CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CWE: CWE-78

Multi-source intelligence:

• Reported by: ProgressSoftware (so vendor advisory)
• CPEs: listed for all four products with wildcard versions (*)
• Tags: Command Injection, Loadmaster, etc.
• References: an advisory from Progress community.

Other fields: EPSS? Not provided. KEV? Not mentioned. Patch availability? The advisory link likely contains info but not provided here. The description and CVSS vector is given. No explicit patch version mentioned; the advisory is a bulletin, so we can infer that patches may be available. For remediation, we need to pull the exact fix version if possible. Since the input doesn't include the advisory content, we can't specify the exact fixed version. We'll state that the vendor advisory provides remediation details and recommend consulting it. However, we should check if the advisory link title suggests any version: "LoadMaster Critical Security Bulletin July 2026 ..." and also includes other CVEs. It likely includes patched versions. We'll note that patches are available in the advisory. For remediation, we'll say "Upgrade to the fixed version as per the vendor advisory at [link]."

Risk assessment: CVSS 8.4, vector is AV:A (adjacent network), AC:L, PR:H (high privileges), UI:N, S:C (scope changed), C:H/I:H/A:H. This means adjacent network attack vector, low complexity, high privileges required, scope changed, high impact all. EPSS missing. KEV not listed. No P