Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-30 07:38 UTC
  • Importiert: 2026-07-06 11:13 UTC
  • CVSS: 9.6
  • Quelle-ID: thn_global
  • uid_hash: e4fc437b9fe428f9b4fe8257993c6ee0886fc56c847be9def911ee0b4f765920
The Hacker News

Inhalt

A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API.

The flaw, tracked as CVE-2026-8037, carries a CVSS score of 9.8 according to ZDI. A patch is available. If you run LoadMaster with the API enabled, update now.

Progress published its advisory on June

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-8037

CRITICAL

9.6

CRITICAL

9.6

2026-06-04

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste