Mark Hoffmann (Progress Software) asked a question.
Release Notice: ECS Connection Manager 7.2.62.2 Security Update
Release Date: 12 January 2026
Security Updates
Fix for CVE-2025-13444
Fixed a command injection Remote Code Execution (RCE) vulnerability in the cipher set UI and getcipherset API command; these have been updated to prevent unintended execution of remote commands.
Fix for CVE-2025-13447
Fixed a command injection Remote Code Execution (RCE) vulnerability in several UI interfaces and API commands, which have been updated to prevent unintended execution of remote commands.
Other Updates
Additional fixes not directly related to system security have also been included in this release. Please see the release notes for the details, at the link below.
Links