Critical Command Injection Vulnerability Discovered in Progress LoadMaster

What changed

The Progress LoadMaster has been found to contain a command injection vulnerability that could enable remote attackers to execute arbitrary code. This vulnerability, identified as CVE-2026-8037, has been rated with a CVSS score of 7.2, indicating a high severity level.

Authentication is required for exploitation, which may limit the risk to some extent, but it still poses a serious threat to affected systems.

Who is affected

Various users and organizations utilizing Progress LoadMaster are at risk due to this vulnerability. The following groups should take particular note:

Organizations using Progress Software products for their networking and application delivery needs should assess their exposure.

• Progress Software customers utilizing LoadMaster for application delivery.
• Network administrators managing systems with Progress LoadMaster installations.
• Organizations relying on Kemp technologies for load balancing and application management.

What to do

Affected users should immediately review their systems to determine if they are running vulnerable versions of Progress LoadMaster. It is crucial to apply any available patches or updates from the vendor to mitigate this risk.

Implementing additional security measures, such as network segmentation and enhanced monitoring, can also help reduce the potential impact of this vulnerability.

• Check for updates or patches from Progress Software.
• Review authentication mechanisms to ensure they are robust.
• Consider enhancing network security protocols to limit exposure.