Progress Kemp LoadMaster RCE Vulnerability
On 1 July, The Hacker News reported active exploitation attempts against a pre-authentication remote code execution flaw in Progress Kemp LoadMaster. BleepingComputer also reported active exploitation in attacks. The Hacker News said the flaw entered CISA’s Known Exploited Vulnerabilities catalog after 792 reported exploit attempts. On 2 July, Dev.to identified the issue as CVE-2026-8037, described it as critical, and called for immediate patching.
If the reports are factual, impact is 0%. Progress Kemp LoadMaster operators are directly affected and need to patch CVE-2026-8037 immediately. The tracked event currently has no measured wider impact.
Watch for updated Progress guidance and further exploitation data clarifying the scale of attacks beyond the 792 reported attempts.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity security flaw impacting Progress Kemp LoadMaster to its Known Exploited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability.
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →