{"uuid": "417f00ce-5e44-4c7b-b3e8-3a672e42c0b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2545", "content": "\ud83d\udd34 CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability\n\nThe US cybersecurity agency CISA has urged federal agencies to immediately patch a critical-severity vulnerability in Progress Kemp LoadMaster that has been exploited in the wild.\n\nTracked as CVE-2026-8037 (CVSS score of 9.6), the flaw is described as an OS command injection that could be exploited without authentication for remote code execution (RCE).\n\nAccording to Progress\u2019 advisory, a remote attacker could exploit the bug through unsanitized API inputs to execute arbitrary commands on the LoadMaster appliance.\n\nDisclosed on June 4 alongside CVE-2026-33691, the security defect also affects ECS Connection Manager, Connection Manager for ObjectScale, and MOVEit WAF.", "creation_timestamp": "2026-08-23T00:00:47.036363Z"}