CVE-2026-8037

LLM-synthesized narrative grounded in this CVE's description and references.

• Progress (organisation)/Connection Manager For Objectscale*

  cpe:2.3:a:progress:connection_manager_for_objectscale:*:*:*:*:*:*:*:*

  Range: <7.2.63.2
• Progress (organisation)/Ecs Connection Manager

  cpe:2.3:a:progress:ecs_connection_manager:*:*:*:*:*:*:*:*

  Range: <7.2.63.2
• Progress (organisation)/Moveit Web Application Firewall

  cpe:2.3:a:progress:moveit_web_application_firewall:*:*:*:*:*:*:*:*

  Range: <7.2.63.2
• Progress (organisation)/Loadmaster2 versions

  cpe:2.3:o:progress:loadmaster:*:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:o:progress:loadmaster:*:*:*:*:*:*:*:*range: <7.2.54.18
  • (no CPE)
• Progress (organisation)/ADC Productsllm-fuzzy

• community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691nvdPatchVendor Advisory
• labs.watchtowr.com/enterprise-tech-in-shell-out-progress-kemp-loadmaster-uninitialized-heap-to-pre-auth-rce-cve-2026-8037/nvdExploitPatchThird Party Advisory
• www.esentire.com/security-advisories/progress-kemp-loadmaster-vulnerability-targeted-cve-2026-8037nvdThird Party Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• CISA Warns of Progress LoadMaster Command Injection Vulnerability Exploited in Attacks
  Cyber Security News · Aug 10, 2026
• CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability
  SecurityWeek · Aug 10, 2026
• Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts
  The Hacker News · Aug 8, 2026
• Progress: CVE-2026-8037 Added to CISA KEV Under Active Exploitation
  Vypr Intelligence · Aug 7, 2026
• ⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More
  The Hacker News · Jul 6, 2026
• 6th July – Threat Intelligence Report
  Check Point Research · Jul 6, 2026
• Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts
  The Hacker News · Jul 1, 2026
• Critical Progress Kemp LoadMaster Vulnerability Enables Pre-Auth Remote Code Execution
  Cyber Security News · Jun 30, 2026
• Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth
  The Hacker News · Jun 30, 2026
• Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037)
  watchTowr Labs · Jun 29, 2026
• ZDI-26-341: Progress Software Kemp LoadMaster dolistapikeys Uninitialized Memory Remote Code Execution Vulnerability
  Zero Day Initiative · Jun 9, 2026
• ZDI-26-340: Progress Software Kemp LoadMaster dodelapikey Uninitialized Memory Remote Code Execution Vulnerability
  Zero Day Initiative · Jun 9, 2026
• ZDI-26-342: Progress Software Kemp LoadMaster apiuser Uninitialized Memory Remote Code Execution Vulnerability
  Zero Day Initiative · Jun 9, 2026
• CISA Adds One Known Exploited Vulnerability to Catalog
  CISA Alerts