Progress Kemp LoadMaster Command Injection (CVE-2026-8037) Added to CISA KEV

Sun, 09 Aug 2026 11:41:42 +0000

Engineer — Act: CISA KEV-listed, EPSS 0.99, public PoC, and 792 confirmed exploit attempts make this an emergency patch. Apply the Progress Kemp LoadMaster patch immediately or isolate the appliance from untrusted networks until patched.
SOC/IR — Act: Active exploitation of a perimeter load balancer warrants an assume-breach sweep — hunt for command injection patterns in LoadMaster access logs since the first reported attempts, and check downstream hosts for lateral movement indicators.
Leader — Act: CISA KEV listing plus confirmed active exploitation makes this a board-question-level appliance vulnerability; confirm this week whether LoadMaster is in your environment and verify engineering has patched or isolated affected instances.
Signals: CVE-2026-8037 — CISA KEV: listed, EPSS 0.99, public PoC on GitHub

Load-Balancer on CuraSec