Progress Kemp LoadMaster Flaw Exploited; SonicWall SMA1000 Flaws Exploited in Ransomware
NEOSEC enrichment — no mirror of the original source
The US Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw in Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog, and has also updated the existing KEV entries for exploited flaws in
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Neely.
Linked advisories
- CVE-2026-8037Progress LoadMaster: Befehlsinjektion
- CVE-2026-8037Progress LoadMaster — Progress LoadMaster Command Injection Vulnerability
- CVE-2026-15409SonicWall SMA: Mehrere Schwachstellen
- CVE-2026-15409sonicwall sma6210_firmware: Server-Side-Request-Forgery (SSRF)
- CVE-2026-15410sonicwall sma6210_firmware: Code-Injection
- CVE-2026-15410SonicWall SMA1000 Appliances — SonicWall SMA1000 Appliances Code Injection Vulnerability
- CVE-2026-8037Kemp LoadMaster: Mehrere Schwachstellen
- CVE-2026-15409SonicWall SMA1000 Appliances — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
Affected vendors and products
- Progress Progress Connection Manager for ObjectScale
- Progress Progress ECS Connection Manager
- Progress Progress LoadMaster
- Progress Progress MOVEit Web Application Firewall (WAF)
- Progress Software Ecs Connections Manager
- Progress Software Loadmaster
- Progress Software Moveit Waf
- Progress Software Object Scale Connection Manager
- SonicWall SonicWall SMA1000
- SonicWall SonicWall SMA6210 Firmware
- SonicWall SonicWall SMA7210 Firmware
- SonicWall SonicWall SMA1000
More on LoadMaster
Other advisories
- CriticalCVE-2026-33691Kemp LoadMaster: Mehrere Schwachstellen
- CriticalCVE-2026-8037Progress LoadMaster: Progress LoadMaster Command Injection Vulnerability
- HighCVE-2026-59687Progress Software LoadMaster und MOVEit WAF: Mehrere Schwachstellen
- HighCVE-2026-59689Progress Software LoadMaster: fehlerhafte Autorisierung
- HighCVE-2026-59689Progress Software LoadMaster: fehlerhafte Autorisierung
- CriticalCVE-2026-8037Progress LoadMaster: Befehlsinjektion
- CriticalCVE-2026-8037Progress LoadMaster: Befehlsinjektion
- HighCVE-2026-4048Progress Software LoadMaster: Befehlsinjektion
Other news entries
- Critical Progress LoadMaster flaw now actively exploited in attacksNewsBleepingComputer
- CISA Urges Immediate Patching of Exploited Progress LoadMaster VulnerabilityNewsSecurityWeek
- Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit AttemptsNewsThe Hacker News
- Progress Software LoadMaster und MOVEit WAF: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Multiples vulnérabilités dans Progress LoadMaster (15 juillet 2026)NewsCERT-FR (ANSSI)
- Kemp LoadMaster: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation AttemptsNewsThe Hacker News
- Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-AuthNewsThe Hacker News
ID