August 9, 2026
- Progress Kemp LoadMaster RCE (CVE-2026-8037) was added to CISA KEV after 792 reported exploit attempts; watchTowr says it flagged customer exposure 39 days ahead of the KEV listing (The Hacker News). · Vulnerabilities & Exploits
tagged
[CVE-2026-8037]
3 editions · 3 items
July 2, 2026
- Progress Kemp LoadMaster pre-auth RCE CVE-2026-8037 (root command execution via crafted API request) is now under active exploitation, per eSentire's TRU — moving from last week's watchTowr PoC to real-world attacks. Patch if the API is exposed. The Hacker News. · Vulnerabilities & Exploits
in Scattered Spider Suspect Grabbed at Helsinki Airport, Extradited to the US
June 30, 2026
- watchTowr published a deep-dive on CVE-2026-8037, an uninitialized-heap bug in Progress Kemp LoadMaster that escalates to unauthenticated pre-auth RCE on an appliance that typically sits at the network edge. Classic "the way in rather than the thing keeping people out" exposure for anyone fronting services with LoadMaster. watchTowr Labs · Vulnerabilities & Exploits