< BACK TO NEWS
importantSYS.SOURCE: The Hacker News2026-08-08T12:22:16+05:30

Progress Kemp LoadMaster Vulnerability CVE-2026-8037 Added to CISA KEV List After Exploitation Reports

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the critical-severity CVE-2026-8037 command injection vulnerability in Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog following 792 reported exploit attempts. The flaw enables arbitrary code execution on affected devices without authentication, prompting urgent patching recommendations for federal agencies.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity security flaw impacting Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.

The vulnerability, tracked as CVE-2026-8037 (CVSS score: 9.6), is a command injection flaw that could be weaponized to achieve arbitrary

Read original article

*** END OF TRANSMISSION ***

> APPLE LAUNCHES DEVICE LEASING INITIATIVE FOR IPHONES AND ACCESSORIES> AMAZON'S NEW TEXAS DATA CENTER LINKED TO HIGH-EMISSION POWER PLANT> US CYBER COMMAND UNIT INVESTIGATES MULTIPLE SUICIDE DEATHS AMONG PERSONNEL> EUROPEAN SATELLITE SERVICE ENHANCES WILDFIRE TRACKING CAPABILITIES> DEEPMIND'S WEATHERNEXT AI MODEL ENHANCES CYCLONE FORECASTING ACCURACY> ATLASSIAN ROVO VULNERABILITY ALLOWS EXFILTRATION OF JIRA AND CONFLUENCE DATA VIA PROMPT INJECTION> CSS-BASED WEBMAIL VULNERABILITIES ENABLE PASSWORD AND TOKEN THEFT VIA UI MANIPULATION> DISCOVERY OF HARDWARE BACKDOOR IN VIA C3 X86 PROCESSORS> METABASE ZERO-DAY VULNERABILITY ENABLES UNAUTHENTICATED ADMIN ACCESS> N-ABLE RELEASES N-CENTRAL HOTFIX 2 TO ADDRESS EXPLOITED VULNERABILITY AND PERSISTENCE THREATS> APPLE LAUNCHES DEVICE LEASING INITIATIVE FOR IPHONES AND ACCESSORIES> AMAZON'S NEW TEXAS DATA CENTER LINKED TO HIGH-EMISSION POWER PLANT> US CYBER COMMAND UNIT INVESTIGATES MULTIPLE SUICIDE DEATHS AMONG PERSONNEL> EUROPEAN SATELLITE SERVICE ENHANCES WILDFIRE TRACKING CAPABILITIES> DEEPMIND'S WEATHERNEXT AI MODEL ENHANCES CYCLONE FORECASTING ACCURACY> ATLASSIAN ROVO VULNERABILITY ALLOWS EXFILTRATION OF JIRA AND CONFLUENCE DATA VIA PROMPT INJECTION> CSS-BASED WEBMAIL VULNERABILITIES ENABLE PASSWORD AND TOKEN THEFT VIA UI MANIPULATION> DISCOVERY OF HARDWARE BACKDOOR IN VIA C3 X86 PROCESSORS> METABASE ZERO-DAY VULNERABILITY ENABLES UNAUTHENTICATED ADMIN ACCESS> N-ABLE RELEASES N-CENTRAL HOTFIX 2 TO ADDRESS EXPLOITED VULNERABILITY AND PERSISTENCE THREATS