VulnerabilityBleeping Computer
9.8 — CRITICAL
Critical Progress LoadMaster flaw now actively exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A critical-severity vulnerability in Progress Kemp LoadMaster has been actively exploited in attacks, with nearly 300 instances exposed online and a high risk of malicious cyber actors targeting federal enterprises and tech companies worldwide.
⚙️Technical Details
Affected Systems
Progress Connection Manager For ObjectscaleProgress Ecs Connection ManagerProgress Loadmaster
Attack Vectors
NETWORK
💥Impact Assessment
Severity: critical
Who Is at Risk
U.S. Federal Civilian Executive Branch (FCEB) agenciestech companies and government entities worldwideSeverity: critical
🛡️Recommended Actions
1Patch the vulnerability in Kemp LoadMaster with the latest security updates
2Monitor for suspicious activity on exposed LoadMaster instances
3Implement additional security controls to prevent lateral movement and containment of attacks
📦Affected Products
Progress Connection Manager For ObjectscaleProgress Ecs Connection ManagerProgress LoadmasterProgress Kemp LoadMaster
🔐NVD Verified DataVERIFIED
CVE-2026-8037 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-77
Affected Products (CPE)
Progress Connection Manager For ObjectscaleProgress Ecs Connection ManagerProgress Loadmaster
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.