Tony Vaughan (Progress Software) asked a question.
Release Notice: ECS Connection Manager 7.2.63.2 Security Update
Release Date: 4 June 2026
Release Versions
- GA: 7.2.63.2
Security Updates
Fix for CVE-2026-8037
Fixed a command injection Remote Code Execution (RCE) vulnerability in the cipher set UI and API command; these have been updated to prevent unintended execution of remote commands. Refer to the CVE details for more information.
Fix for CVE-2026-33691
Fixed an issue with the OWASP Core Rule Set where it failed to normalize whitespaces in filenames before applying the extension‑checking regular expression
Refer to the CVE details for more information.
Links