Critical Progress Kemp LoadMaster Vulnerability Enables Pre

Cybersecuritynews •Tushar Subhra Dutta • June 30, 2026

A critical security vulnerability in Progress Kemp LoadMaster has put enterprise networks across the globe at serious risk. Tracked as CVE-2026-8037, the flaw allows an unauthenticated remote attacker to execute arbitrary system commands directly on affected appliances, with absolutely no login credentials required to do so. Kemp LoadMaster is a widely deployed load balancer and […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in Progress Kemp LoadMaster Exposed A critical pre-authentication Remote Code Execution (RCE) vulnerability, tracked as CVE-2026-8037, has been identified in Progress's Kemp LoadMaster, a widely used edge load balancer and ADC. This flaw allows unauthenticated attackers to execute arbitrary shell commands by exploiting an uninitialized memory/string-termination issue in the device's API handling. The vulnerability poses a significant risk to enterprise networks globally, as it requires no login credentials for exploitation. The first public proof of concept (PoC) was released on June 30, 2026, heightening concerns about potential attacks. Organizations using Kemp LoadMaster are urged to assess their exposure and implement necessary security measures immediately. The vulnerability's critical nature necessitates prompt action from affected entities to mitigate risks. 3 sources 70

Extracted Entities

Critical Progress Kemp LoadMaster Vulnerability Enables Pre

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (2)

MITRE ATT&CK (1)

Platforms (1)