CVE-2026-8037

Progress LoadMaster Vulnerability

Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints.

CVSS Score

9.8

CRITICAL

Published

07 Aug 2026 00:00

Modified

N/A

Vendor

Progress

Product

LoadMaster

Source

CIRCL

Affected Versions

Fix Vendor Patch / Mitigation Available

Weaknesses (CWE)

CWE-77

References

nvd.nist.gov /vuln/detail/CVE-2026-8037 cve.circl.lu /cve/CVE-2026-8037 cve.mitre.org /cgi-bin/cvename.cgi vuldb.com /

Affected Systems

Progress

LoadMaster

Progress

LoadMaster

External Links

NVD Database CIRCL CISA KEV

KEV Status

Known Exploited Vulnerability