CVE-2026-8037 Progress Software LoadMaster
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints
- CVSS
- 9.6 Critical
- EPSS
- 100%
- Percentile
- 100
- Published
- 2026-06-04
- Force
- 11 of 12
- Public PoC
- 2
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
On CISA’s exploited list
Progress LoadMaster Command Injection Vulnerability
- Added
- 2026-08-07
- Federal patch deadline
- 2026-08-10
- Ransomware use
- not known