Progress Kemp Load Master Flaw Hits CISA KEV After 792 Reported Exploit Attempts
Summary: CISA added CVE-2026-8037, a command injection flaw in Progress Kemp LoadMaster with a CVSS score of 9.6, to its Known Exploited Vulnerabilities catalog on Friday after reports of active exploitation. KEVIntel telemetry recorded 792 exploitation attempts over 41 days from 65 unique IP addresses across 18 countries, with the last activity on August 4, 2026, and FCEB agencies are directed to patch by August 10, 2026 under BOD 26-04.
Why it matters: An unauthenticated attacker can run arbitrary commands on the load balancer through unsanitized input, and 65 IP addresses across 18 countries have already tried - with FCEB agencies given until August 10, 2026 to patch.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-8037
- Related
- CVE-2026-8037: Progress Load Master Command Injection Vulnerability Known Exploited Vulnerabilities · Aug 07, 2026