EXPOSURES › CVE-2026-8037

CVE-2026-8037

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2026-08-07 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-8037 ↗

⚡ RCE ◐ ZERO-DAY ⌖ EXPLOITED IN THE WILD SHAME 65/100 rceexploited-in-wild

Progress LoadMaster appliances have a command injection vulnerability allowing unauthenticated attackers to execute arbitrary commands.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

progress · vendor loadmaster · product

DESCRIPTION

Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.