Progress LoadMaster vulnerable to 10/10 severity RCE flaw

Progress Software released an emergency fix for CVE-2024-7591, a maximum-severity (10/10) improper input validation vulnerability in LoadMaster and LoadMaster MT Hypervisor that allows unauthenticated remote command execution via crafted HTTP requests; the vendor provides an add-on package patch for vulnerable supported releases (the free edition is not covered) and recommends installing the add-on and applying hardening measures, with no reports of active exploitation at publication.