Vulnerability intelligence

CVE-2026-8037

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints

CVSS Score

9.6

Critical

EPSS — Exploit Probability

43%

Riskier than 99% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

unknown

Check vendor advisories

NVD entry PoC / advisory

4 articles across 2 outlets · first covered Jun 9, 2026 · latest Jul 6, 2026

Tracked incidents

vulnerability open 2 articles

Multiple critical flaws affect Progress Kemp LoadMaster appliances

Coverage timeline

Weekly Threat Intelligence: The July 2026 Breaches
securityonline.info · Jul 6, 2026
CVE-2026-8037: Progress Kemp LoadMaster RCE Exploited in the Wild
socradar.io · Jul 2, 2026
Kemp LoadMaster zero day RCE exploited PoC surfaces patch urged
securityonline.info · Jul 1, 2026
Check Point VPN, Kemp LoadMaster hit by CVE-2026-50751 exploit
securityonline.info · Jun 9, 2026