Kemp LoadMaster zero day RCE exploited PoC surfaces patch urged

THE Kemp LoadMaster RCE vulnerability (CVE-2026-8037) was exploited starting June 29, 2026, coinciding with the release of proof-of-concept exploit code. This severe flaw allows unauthenticated attackers to execute commands as root, risking broader system compromise due to its placement at the network edge. The vulnerability affects versions 7.2.63.1 and earlier, with patches released on June 4. If immediate updates are not possible, disabling the LoadMaster API is recommended to mitigate the threat. Administrators should also review logs for suspicious API requests.