CVE-2026-8037
Covered in 5 advisories
Radar advisories
- 2026-09-09 ZDI ZDI-26-646: Progress Software Kemp LoadMaster escape_quotes Uninitialized Memory Remote Code Execution Vulnerability Authentication is required to exploit the uninitialized memory remote code execution flaw in Kemp LoadMaster.
- 2026-08-07 CISA CISA KEV — Progress LoadMaster (CVE-2026-8037) CISA added CVE-2026-8037, a command-injection flaw in Progress LoadMaster, to its KEV catalog.
- 2026-06-09 ZDI ZDI-26-340: Progress Software Kemp LoadMaster dodelapikey Uninitialized Memory Remote Code Execution Vulnerability The vulnerability requires authentication and involves uninitialized memory in the dodelapikey function, potentially leading to remote code execution.
- 2026-06-09 ZDI ZDI-26-341: Progress Software Kemp LoadMaster dolistapikeys Uninitialized Memory Remote Code Execution Vulnerability The vulnerability requires authentication and affects the dolistapikeys functionality in Progress Software Kemp LoadMaster.
- 2026-06-09 ZDI ZDI-26-342: Progress Software Kemp LoadMaster apiuser Uninitialized Memory Remote Code Execution Vulnerability The vulnerability affects the apiuser component in Progress Software Kemp LoadMaster and can be exploited remotely without authentication.
References
- NVD ↗
- CVE.org ↗
- CISA KEV catalogue ↗ listed as known exploited
- Zero Day Initiative ↗