Multiple Vulnerabilities in Progress Software and GIMP Allow Code Execution

Zerodayinitiative

Multiple Vulnerabilities in Progress Software and GIMP Allow Code Execution

First seen 3 Feb 2026, 04:03 UTC • •27.9

Article Content

1 / 5

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

Two vulnerabilities have been reported that allow attackers to execute arbitrary code on affected systems. The first vulnerability (ZDI-26-052) affects Progress Software Kemp LoadMaster, requiring authentication for exploitation. The second vulnerability (ZDI-26-050) impacts GIMP, necessitating user interaction to exploit through malicious files or pages.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 208d ago How this analysis works

More articles in this cluster (4)

Threat Graph

3 entities, 2 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Zero-day Exploit

Affected Platform (2)

GIMP
Kemp LoadMaster

Relationships

Zero-day Exploit targets GIMP
Zero-day Exploit targets Kemp LoadMaster

Continue Reading

Critical Authentication Bypass in Cisco Catalyst SD-WAN Manager Exploited On September 30, 2026, Cisco disclosed a critical vulnerability (CVE-2026-76504) in the Catalyst SD-WAN Manager that allows unauthenticated remote attackers to bypass authentication and gain admin-level access to the system. This flaw stems from improper handling of URI encoding in HTTP requests, enabling attackers to…

Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited In late September 2026, two critical zero-day vulnerabilities (CVE-2026-88771 and CVE-2026-88772) in Citrix NetScaler ADC and Gateway were actively exploited, allowing remote code execution. The Cybersecurity and Infrastructure Security Agency (CISA) added these CVEs to its Known Exploited Vulnerabilities catalog on…