Progress: CVE-2026-8037 Added to CISA KEV Under Active Exploitation
Progress has seen a critical vulnerability, CVE-2026-8037, confirmed as actively exploited in the wild and subsequently added to CISA's Known Exploited Vulnerabilities catalog.
Key findings
- CVE-2026-8037, affecting Progress software, is now in CISA's KEV catalog.
- The vulnerability is confirmed to be under active exploitation by threat actors.
- Immediate patching and mitigation are critical to prevent compromise.
- Federal agencies must remediate this flaw by February 7, 2027.
CISA has added CVE-2026-8037, a critical vulnerability affecting Progress software, to its Known Exploited Vulnerabilities (KEV) catalog. This inclusion signifies that the flaw has been confirmed under active exploitation by threat actors, elevating its urgency for immediate remediation across federal agencies and critical infrastructure organizations.
The vulnerability, identified as CVE-2026-8037, represents a significant risk given its confirmed exploitation. While specific details of the exploit chain or affected products were not immediately released, its presence in the KEV catalog underscores the potential for severe impact if left unaddressed.
Active exploitation means that attackers are already leveraging this flaw to compromise systems, potentially leading to data breaches, system control, or further network intrusion. Organizations utilizing Progress software should consider this a high-priority security alert, as the window for unpatched systems to be targeted is actively closing.
Defenders are strongly advised to identify all instances of Progress software within their environments and apply the necessary patches or mitigation steps immediately. CISA's KEV catalog mandates that federal civilian executive branch agencies remediate listed vulnerabilities by specific due dates, with this particular flaw requiring action by February 7, 2027. All other organizations should follow this guidance to protect against ongoing threats.