A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API.
The flaw, tracked as CVE-2026-8037, carries a CVSS score of 9.8 according to ZDI. A patch is available. If you run LoadMaster with the API enabled, update now.
Progress published its advisory on June
source https://thehackernews.com/2026/06/progress-kemp-loadmaster-flaw-could-let.html
Tuesday, June 30, 2026
Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box