Back to the CVE list
CVE-2026-8037 CISA KEV · Actively exploited

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

CVSS score

9.6

EPSS probability

%77.4

Risk score

14.9

Published

4 mo ago

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

Security.NL10.08.2026

Kritiek lek in Progress Kemp LoadMaster-loadbalancers actief misbruikt

Aanvallers maken actief misbruik van een kritieke kwetsbaarheid in Progress Kemp LoadMaster-loadbalancers, zo waarschuwt het ...

The Hacker News08.08.2026

Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity security flaw impacting Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild. The vulnerability, tracked as CVE-2026-8037 (CVSS score: 9.6), is a command injection flaw that could be weaponized to achieve arbitrary

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-8037"