CVE-2026-8037: Progress Kemp LoadMaster RCE Exploited in the Wild

CVE-2026-8037 is a critical (CVSS 9.6) unauthenticated OS command-injection vulnerability in Progress Kemp LoadMaster appliances reachable via the API; public proof-of-concept code and same-day in-the-wild exploitation attempts were reported. The advisory identifies affected 7.2.x versions, urges immediate patching to fixed releases, recommends reducing management/API exposure, and advises verification and forensic steps if compromise is suspected.