NewswatchTowr Labs
Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037)
Teaser from the source
Welcome back to another watchTowr Labs blog post. This time, we're looking at Progress Kemp LoadMaster, a load balancer that sits at the edge of a lot of enterprise networks. Edge appliances have a habit of becoming the way in rather than the thing keeping people out, and
This is the RSS-feed teaser. Read the full article at the original source.
Read at watchTowr LabsLinked advisories
- CVE-2026-8037Progress LoadMaster: Befehlsinjektion
- CVE-2026-8037Progress LoadMaster — Progress LoadMaster Command Injection Vulnerability
- CVE-2026-33691Coreruleset: fehlerhafte Behandlung von Groß-/Kleinschreibung
- CVE-2026-8037Progress LoadMaster: Progress LoadMaster Command Injection Vulnerability
- CVE-2026-33691Coreruleset: fehlerhafte Behandlung von Groß-/Kleinschreibung
- CVE-2026-33691Kemp LoadMaster: Mehrere Schwachstellen
Affected vendors and products
- OWASP OWASP ModSecurity Core Rule Set
- Progress Progress Connection Manager for ObjectScale
- Progress Progress ECS Connection Manager
- Progress Progress LoadMaster
- Progress Progress MOVEit Web Application Firewall (WAF)
- Progress Software Ecs Connections Manager
- Progress Software Loadmaster
- Progress Software Moveit Waf
- Progress Software Object Scale Connection Manager
More on LoadMaster
Other advisories
- CriticalCVE-2026-33691Kemp LoadMaster: Mehrere Schwachstellen
- CriticalCVE-2026-8037Progress LoadMaster: Progress LoadMaster Command Injection Vulnerability
- HighCVE-2026-59687Progress Software LoadMaster und MOVEit WAF: Mehrere Schwachstellen
- HighCVE-2026-59689Progress Software LoadMaster: fehlerhafte Autorisierung
- HighCVE-2026-59689Progress Software LoadMaster: fehlerhafte Autorisierung
- CriticalCVE-2026-8037Progress LoadMaster: Befehlsinjektion
- CriticalCVE-2026-8037Progress LoadMaster: Befehlsinjektion
- HighCVE-2026-4048Progress Software LoadMaster: Befehlsinjektion
Other news entries
- Critical Progress LoadMaster flaw now actively exploited in attacksNewsBleepingComputer
- CISA Urges Immediate Patching of Exploited Progress LoadMaster VulnerabilityNewsSecurityWeek
- Progress Kemp LoadMaster Flaw Exploited; SonicWall SMA1000 Flaws Exploited in RansomwareVulnerabilitySANS NewsBites
- Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit AttemptsNewsThe Hacker News
- Progress Software LoadMaster und MOVEit WAF: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Multiples vulnérabilités dans Progress LoadMaster (15 juillet 2026)NewsCERT-FR (ANSSI)
- Kemp LoadMaster: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation AttemptsNewsThe Hacker News
ID