CVE Tools
Track your stack

Critical Progress LoadMaster flaw now actively exploited in attacks

BleepingComputerBy Sergiu Gatlan

Reported exploitedProgress Kemp LoadMasterMOVEit WAF

Our summary

CISA has warned that threat actors are actively leveraging a critical command injection vulnerability in Progress Kemp LoadMaster devices. Tracked as CVE-2026-8037, this flaw permits unauthenticated users to execute arbitrary commands by manipulating unsanitized API inputs on specific endpoints.

The issue affects Kemp LoadMaster installations running GA v7.2.63.1 or older, along with LTSF v7.2.54.17 or older, and also impacts all MOVEit WAF versions before GA v7.2.63.2. Progress Software released fixes in June, and recent analysis by Shadowserver indicates that nearly 300 instances remain exposed online. CISA has added the CVE to its Known Exploited Vulnerabilities catalog, requiring US federal agencies to remediate the risk within three days under Binding Operational Directive 26-04.

Read at BleepingComputer

BleepingComputer publishes this story on its own site; we link to it rather than reprint it.

  1. SecurityWeekCISA Urges Immediate Patching of Exploited Progress LoadMaster VulnerabilityCVE-2026-33691, CVE-2026-8037
  2. The Hacker NewsProgress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation AttemptsCVE-2026-33691, CVE-2026-8037
  3. The Hacker NewsProgress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-AuthCVE-2026-33691, CVE-2026-8037
  4. watchTowr LabsEnterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037)CVE-2026-33691, CVE-2026-8037
  5. Daily CyberSecurity (securityonline.info)Critical Kemp LoadMaster Flaws Expose Network Appliances to RCECVE-2026-33691, CVE-2026-8037
  6. The Hacker NewsProgress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit AttemptsCVE-2026-8037
  7. The Hacker News⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and MoreCVE-2026-8037
  8. Check Point Research6th July – Threat Intelligence ReportCVE-2026-8037

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store