All CVEs
Vulnerability intelligence

CVE-2026-8037

CWE-77

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints

CVSS Score
9.6
Critical
EPSS — Exploit Probability
0.4%
Riskier than 64% of all CVEs
Exploitation
Not in CISA KEV
No federal exploitation record
Remediation
unknown
Check vendor advisories
NVD entry PoC / advisory

1 article across 1 outlet · first covered Jun 9, 2026 · latest Jun 9, 2026

Coverage timeline