CVE-2026-8037 CISA KEV · Actively exploited
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
CVSS score
9.6
EPSS probability
%77.4
Risk score
14.9
Published
4 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: Progress ADC LoadMaster - Command Injection
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2024-1212 Actively exploited
OS command injection in Progress Loadmaster
P
Patch status unknown Public Exploits:3EPSS %95
9.8
CVE-2017-11357 Actively exploited
Vulnerability in N/a
N
Workaround Public Exploits:2EPSS %78
6.8
CVE-2025-13444
OS command injection in Progress Loadmaster
P
Patch status unknownEPSS %27
7.5
CVE-2026-108116
MDX and SOAP Injection in Kendo UI for jQuery
PS
Patch status unknown
8.8
CVE-2014-5287
Vulnerability in Progress Loadmaster
P
Patch status unknown Public Exploits:3EPSS %8
6.5
CVE-2026-106163
Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser
PS
Patch status unknown
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-8037"