Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth

Summary

A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API. The flaw, tracked as CVE-2026-8037, carries a CVSS score of 9.8 according to ZDI. A patch is available. If you run LoadMaster with the API enabled, update now. Progress published its advisory on June

News Radar provides aggregated summaries. Full content and copyright remain with the original publisher.