Tony Vaughan (Progress Software) asked a question.
Release Notice: Connection Manager for ObjectScale 7.2.63.2 Security Update
Release Date: 4 June 2026
Release Versions
- GA: 7.2.63.2
Security Updates
Fix for CVE-2026-8037
Fixed a command injection Remote Code Execution (RCE) vulnerability in the cipher set UI and API command; these have been updated to prevent unintended execution of remote commands. Refer to the CVE details for more information.
Fix for CVE-2026-33691
Fixed an issue with the OWASP Core Rule Set where it failed to normalize whitespaces in filenames before applying the extension‑checking regular expression
Refer to the CVE details for more information.
Links
Connection Manager for ObjectScale Release Notes and Documentation