Vulnerabilities

CVSS

10.0 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Risk score

100.0

Known exploited

CISA KEV

Published

2024-02-21

Status

Published

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.

Weaknesses

CWE-78

Coverage 2

vulnerability

Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts

A critical remote code execution (RCE) vulnerability, CVE-2026-8037, in Progress Kemp LoadMaster is currently being actively exploited. The flaw allows unauthenticated attackers to execute arbitrary commands on vulnerabl…

The Hacker News · Jul 1, 2026 Critical

CVE-2026-8037CVE-2024-1212rcecommand injectionload balancer

vulnerability

Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth

A critical vulnerability (CVE-2026-8037) in Progress Kemp LoadMaster allows unauthenticated attackers to execute arbitrary commands as root by manipulating API requests. The flaw stems from a lack of proper sanitization…

The Hacker News · Jun 30, 2026 Critical

CVE-2026-8037CVE-2026-33691CVE-2024-1212CAcommand-injectionrootapi

All articles mentioning it

Advisories and references

• kemptechnologies.com/
• freeloadbalancer.com/
• support.kemptechnologies.com/hc/en-us/articles/24325072850573-Releas...
• support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMa...
• cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-...