Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts
- ID
- 12198
- Status
- summarized
- Published
- 08 Aug 2026, 2:52 PM
- Fetched
- 08 Aug 2026, 4:05 PM
- Provider
- The Hacker News
- Category
- security
- Original URL
- https://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.html
- Source URL
- https://feeds.feedburner.com/TheHackersNews
Summary
- Score
- 3.5
- Created
- 08 Aug 2026, 4:07 PM
- Tags
- Audience
- developersdatabase_learners
What happened
CISA added CVE-2026-8037 (CVSS 9.6), an unauthenticated command injection flaw in Progress Kemp LoadMaster, to its Known Exploited Vulnerabilities catalog after 792 exploitation attempts from 65 unique IPs across 18 countries over 41 days. watchTowr Labs traced the root cause to an escape_quotes() function with improper input sanitization, and eSentire reported active but largely unsuccessful exploitation attempts originating from three specific IPs.
Why it matters
If you operate Progress Kemp LoadMaster appliances, patch immediately—CISA's August 10, 2026 deadline for federal agencies signals urgency, and unauthenticated remote code execution on a load balancer sitting in front of your applications is about as bad as it gets. For everyone else, this is a reminder to inventory whether any load balancer or network appliance in your stack exposes management interfaces to the internet.
Discussion angle
How many of us actually know what network appliances sit between our apps and the internet, and whether their admin interfaces are exposed—this CVE is a prompt to audit that blind spot rather than a call to action for most of the room.