Progress has released patches for multiple remote code execution and OS command injection flaws in MOVEit WAF and LoadMaster.