Progress Kemp LoadMaster Vulnerability CVE-2026-8037 Added to CISA KEV List After Exploitation Reports

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the critical-severity CVE-2026-8037 command injection vulnerability in Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog following 792 reported exploit attempts. The flaw enables arbitrary code execution on affected devices without authentication, prompting urgent patching recommendations for federal agencies.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity security flaw impacting Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.

The vulnerability, tracked as CVE-2026-8037 (CVSS score: 9.6), is a command injection flaw that could be weaponized to achieve arbitrary

Read original article