Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth

Summary

A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API. The flaw, tracked as CVE-2026-8037, carries a CVSS score of 9.8 according to ZDI. A patch is available. If you run LoadMaster with the API enabled, update now. Progress published its advisory on June

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.