Latest / The Digital Warfare Podcast
EP. 143: CVE-2026-8037 Turns LoadMaster Into a Pre-Authentication Attack Path
Summary
CVE-2026-8037 is a critical command injection vulnerability affecting Progress Kemp LoadMaster and related ADC products. It allows an unauthenticated attacker to execute arbitrary operating-system commands through unsanitized input sent to vulnerable command endpoints. Progress rates the flaw CVSS 9.6, while NIST assigns a 9.8 score.
CISA has now classified the vulnerability as actively exploited. Progress fixed the issue in LoadMaster 7.2.63.2 GA and 7.2.54.18 LTSF, both released June 4, 2026.
Organizations should patch immediately, restrict administrative access, investigate exposed…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.