Critical Progress Kemp LoadMaster Vulnerability Enables Pre

Gbhackers •Mayura Kathir • June 30, 2026

Progress’s Kemp LoadMaster, a widely deployed edge load balancer and ADC, is at the center of a critical pre-authentication Remote Code Execution (RCE) vulnerability tracked as CVE-2026-8037. The flaw allows unauthenticated attackers with access to the device API to run arbitrary shell commands by exploiting an uninitialized-memory/string-termination bug in LoadMaster’s API handling. Given LoadMaster’s position […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in Progress Kemp LoadMaster Exposed A critical pre-authentication Remote Code Execution (RCE) vulnerability, tracked as CVE-2026-8037, has been identified in Progress's Kemp LoadMaster, a widely used edge load balancer and ADC. This flaw allows unauthenticated attackers to execute arbitrary shell commands by exploiting an uninitialized memory/string-termination issue in the device's API handling. The vulnerability poses a significant risk to enterprise networks globally, as it requires no login credentials for exploitation. The first public proof of concept (PoC) was released on June 30, 2026, heightening concerns about potential attacks. Organizations using Kemp LoadMaster are urged to assess their exposure and implement necessary security measures immediately. The vulnerability's critical nature necessitates prompt action from affected entities to mitigate risks. 3 sources 70

Extracted Entities

Critical Progress Kemp LoadMaster Vulnerability Enables Pre

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)