CISA warns Actively Exploited Progress Kemp LoadMaster RCE Flaw
Brief
The U. S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical command-injection vulnerability affecting Progress Kemp LoadMaster appliances to its Known Exploited Vulnerabilities (KEV) Catalog, warning that the flaw is being actively exploited in the wild.
Tracked as CVE-2026-8037, the vulnerability allows an unauthenticated remote attacker to execute arbitrary operating system commands on affected LoadMaster appliances.
Progress LoadMaster is an application delivery controller and load balancer commonly deployed at the network edge to distribute application traffic, provide SSL offloading, and manage availability.