{"vulnerability": "CVE-2026-8037", "sightings": [{"uuid": "4801868a-37f1-4831-9027-c5ad2a94f1d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-552", "content": "", "creation_timestamp": "2026-06-05T10:19:13.000000Z"}, {"uuid": "40b31496-6529-4e2d-ac0e-f9344be99049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/116699833514512441", "content": "Setzt jemand auf den Progress Kemp Loadmaster?\nhttps://borncity.com/blog/2026/06/05/progress-kemp-loadmaster-mit-zwei-kritischen-schwachstellen-cve-2026-8037-cve-2026-33691/", "creation_timestamp": "2026-06-05T22:22:23.877384Z"}, {"uuid": "4ab3ccb2-a1bb-4f37-ae40-3e60abc5f5c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mph7ur5kcr2o", "content": "Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) - watchTowr Labs", "creation_timestamp": "2026-06-29T19:28:11.689351Z"}, {"uuid": "3a6bd2f8-1689-443d-8bb5-a7d58c80e374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mphahhx22y2v", "content": "We're back, analyzing CVE-2026-8037, a pre-auth RCE in Progress' Kemp LoadMaster appliance.\n\n\nhttps://\nlabs.watchtowr.com/enterprise-tec\nh-in-shell-out-progress-kemp-loadmaster-uninitialized-heap-to-pre-auth-rce-cve-\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2071676690791559564)", "creation_timestamp": "2026-06-29T19:38:39.557576Z"}, {"uuid": "d17ddc11-547b-4cb7-a512-3de376fd518d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mphbduuznn26", "content": "Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) - watchTowr Labs", "creation_timestamp": "2026-06-29T19:54:32.699081Z"}, {"uuid": "54518a33-e7ee-4f17-ac54-f407a81aaafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mphbdvfyyd2q", "content": "Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) - watchTowr Labs", "creation_timestamp": "2026-06-29T19:54:33.212869Z"}, {"uuid": "ea44b5d0-70b9-499f-a67e-98209085f210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://thehackernews.com/2026/06/progress-kemp-loadmaster-flaw-could-let.html", "content": "A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API.\n\nThe flaw, tracked as CVE-2026-8037, carries a CVSS score of 9.8 according to ZDI. A patch is available. If you run LoadMaster with the API enabled, update now.\n\nProgress published its advisory on June", "creation_timestamp": "2026-06-30T10:00:53.274274Z"}, {"uuid": "d6d23fc1-d969-4b13-8d53-ac26ad382d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpis7q656z2b", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8037 \u0432 Progress Kemp LoadMaster: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/991C109A-D7C3-4285-9EE1-62009B337AAC", "creation_timestamp": "2026-06-30T10:29:06.605684Z"}, {"uuid": "45684dc2-5c7e-4498-836a-008f34b7c76e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpitr5qcwf2l", "content": "\ud83e\udd16 CVE-2026-8037 (CVSS 9.8): Pre-auth RCE as root in Progress Kemp LoadMaster via a crafted API request. Patch available.\nhttps://thehackernews.com/2026/06/progress-kemp-loadmaster-flaw-could-let.html", "creation_timestamp": "2026-06-30T10:56:45.015341Z"}, {"uuid": "a79ce133-ca54-40a1-88ef-3f7bbe56a68a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116838713560265479", "content": "Las \u00faltimas 24 horas en seguridad inform\u00e1tica revelan t\u00e9cnicas avanzadas de evasi\u00f3n EDR con modelos de lenguaje grande y manipulaciones sist\u00e9micas como HookChain y Lacuna Chain, junto a alertas por extensiones maliciosas en Chrome y una grave vulnerabilidad en Progress Kemp LoadMaster que permite ejecuci\u00f3n remota sin autenticaci\u00f3n. Descubre estos y m\u00e1s detalles en el siguiente listado de noticias sobre seguridad inform\u00e1tica:\n\ud83d\uddde\ufe0f \u00daLTIMAS NOTICIAS EN SEGURIDAD INFORM\u00c1TICA \ud83d\udd12====| \ud83d\udd25 LO QUE DEBES SABER HOY \ufeff\ufeff30/06/26\ufeff\ufeff  \ud83d\udcc6 |==== \n\ud83d\udd0d ACELERACI\u00d3N DE LA EVASI\u00d3N EDR CON AN\u00c1LISIS IMPULSADO POR LLM\nSpecterOps ha utilizado modelos de lenguaje grande (LLMs) para analizar Cortex XDR, extrayendo reglas YARA, modelos de machine learning y detecciones de comportamiento con mayor rapidez y precisi\u00f3n. Esta t\u00e9cnica abre nuevas v\u00edas para comprender y fortalecer las defensas EDR frente a amenazas avanzadas. Profundiza en c\u00f3mo los LLMs est\u00e1n transformando la seguridad endpoint \ud83d\udc49 https://djar.co/rlDDng\n\u26a0\ufe0f EXTENSI\u00d3N MALICIOSA DE PERPLEXITY PARA CHROME INTERCEPTA B\u00daSQUEDAS Y ENTRADAS EN LA BARRA DE DIRECCIONES\nMicrosoft ha detectado una extensi\u00f3n falsa de Perplexity para Chrome que intercepta la informaci\u00f3n ingresada por el usuario, incluidos t\u00e9rminos de b\u00fasqueda, direcciones IP y encabezados, antes de redirigir a sitios maliciosos. Esta amenaza pone en riesgo la privacidad y seguridad de los navegadores, por lo que es crucial verificar la autenticidad de las extensiones instaladas. Descubre c\u00f3mo protegerte frente a esta amenaza \ud83d\udc49 https://djar.co/KRJDD\n\ud83d\udee1\ufe0f HOOKCHAIN: AN\u00c1LISIS PROFUNDO DE T\u00c9CNICAS AVANZADAS PARA EVADIR EDR\nHookChain representa una sofisticada t\u00e9cnica para evadir soluciones EDR mediante el uso de API de Windows y la manipulaci\u00f3n directa de llamadas al sistema. Este m\u00e9todo permite que el malware se oculte eficazmente evitando la detecci\u00f3n y respuesta de seguridad habitual. Entiende los detalles t\u00e9cnicos y casos reales para anticiparte a esta evasi\u00f3n \ud83d\udc49 https://djar.co/PfjW\n\ud83d\udc7b LACUNA CHAIN: FRAMES FANTASMAS PARA VENCER TODAS LAS CAPAS DE DETECCI\u00d3N EDR BASADAS EN PILA DE LLAMADAS\nComo evoluci\u00f3n de HookChain, Lacuna Chain implementa manipulaci\u00f3n avanzada del sistema para derrotar todas las capas de detecci\u00f3n que analizan la pila de llamadas en EDR. Esta t\u00e9cnica demuestra c\u00f3mo los atacantes pueden esquivar controles profundos, exigiendo defensas m\u00e1s robustas y adaptativas. Conoce c\u00f3mo funciona esta nueva amenaza y c\u00f3mo prepararte \ud83d\udc49 https://djar.co/1eteTF\n\ud83c\udfaf GARLASCO: \u201cLOS SUPER SOFTWARES ISRAEL\u00cdES PUEDEN AYUDAR A BUSCAR LA VERDAD\u201d EN INVESTIGACIONES DE CIBERSEGURIDAD\nMatteo Adjimi, CEO de Argo Spa, destaca las complejidades que enfrentan las investigaciones en ciberseguridad tras a\u00f1os de evoluci\u00f3n tecnol\u00f3gica y c\u00f3mo el software avanzado israel\u00ed puede aportar claridad y eficacia en la b\u00fasqueda de evidencias digitales. Una visi\u00f3n clave para quienes valoran la innovaci\u00f3n en seguridad y an\u00e1lisis forense digital. Lee la entrevista completa y sus perspectivas \ud83d\udc49 https://djar.co/bTu8\n\ud83d\udea8 CVE-2026-8037 EN PROGRESS KEMP LOADMASTER PERMITE EJECUCI\u00d3N DE COMANDOS RA\u00cdZ SIN AUTENTICACI\u00d3N\nSe ha identificado una grave vulnerabilidad en Progress Kemp LoadMaster que permite la ejecuci\u00f3n de comandos ra\u00edz previos a autenticaci\u00f3n mediante la API, exponiendo sistemas cr\u00edticos. Ya existen parches oficiales y una prueba de concepto p\u00fablica para evaluar la amenaza. Es urgente aplicar las actualizaciones recomendadas para evitar compromisos. Consulta los detalles t\u00e9cnicos y las mitigaciones \ud83d\udc49 https://djar.co/BNnf", "creation_timestamp": "2026-06-30T11:01:33.732913Z"}, {"uuid": "cd398dd5-74d4-414d-8b6c-a290a9d28b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116840119613978714", "content": "WatchTower posted this yesterday, if you missed it:\nEnterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) https://labs.watchtowr.com/enterprise-tech-in-shell-out-progress-kemp-loadmaster-uninitialized-heap-to-pre-auth-rce-cve-2026-8037/ #infosec #vulnerability #threatresearch", "creation_timestamp": "2026-06-30T16:58:59.942469Z"}, {"uuid": "eaa9afdd-45dd-43d6-abd2-513da84c2ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/warthogtk.bsky.social/post/3mpjrwif6zg2v", "content": "Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) labs.watchtowr.com/enterprise-t...", "creation_timestamp": "2026-06-30T19:56:36.539550Z"}, {"uuid": "56cc9b7a-33ab-4074-95f2-8d6644bea192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpjs5ehhic2p", "content": "\u300cProgress Kemp LoadMaster\u300d\u306bRCE\u8106\u5f31\u6027 - WAF\u56de\u907f\u306e\u304a\u305d\u308c\u3082\n\n\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30c7\u30ea\u30d0\u30ea\u30fc\u88fd\u54c1\u300cProgress Kemp LoadMaster\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\nProgress Software\u306f\u73fe\u5730\u6642\u95936\u67084\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30012\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-8037\u300d\u300cCVE-2026-33691\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u300cProgress Kemp LoadMaster\u300d\u300c\u540cLTSF\u300d\u306b\u304f\u308f\u3048\u3066\u3001\u300cProgress ECS Connection Manager\u300d\u300cProgress Connection Manag...", "creation_timestamp": "2026-06-30T20:00:27.303685Z"}, {"uuid": "790ae1f7-df75-48d9-b9fa-77c0b5953fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mpk2m46adm2b", "content": "Critical Progress Kemp LoadMaster Vulnerability Enables Pre-Auth Remote Code Execution \u2013 Patch Now Before Attackers Do +\u00a0Video\n\nIntroduction: A newly disclosed critical vulnerability in Progress Kemp LoadMaster, tracked as CVE-2026-8037, allows unauthenticated remote attackers to execute arbitrary\u2026", "creation_timestamp": "2026-06-30T22:31:52.081196Z"}, {"uuid": "930d4b33-61ab-47d6-8cb6-d090f7680b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://thehackernews.com/2026/06/progress-kemp-loadmaster-flaw-could-let.html", "content": "A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API.\n\nThe flaw, tracked as CVE-2026-8037, carries a CVSS score of 9.8 according to ZDI. A patch is available. If you run LoadMaster with the API enabled, update now.\n\nProgress published its advisory on June", "creation_timestamp": "2026-07-01T01:00:44.925753Z"}, {"uuid": "573b974c-d3db-4b68-83dc-75f7d58fa65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mplcqvsgzv2k", "content": "\ud83d\udce2 CVE-2026-8037 : RCE pr\u00e9-authentifi\u00e9e dans Progress Kemp LoadMaster via heap non initialis\u00e9\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nLe 29 juin 2026, watchTowr Labs\u2026\nhttps://cyberveille.ch/posts/2026-07-01-cve-2026-8037-rce-pre-authentifiee-dans-progress-kemp-loadmaster-via-heap-non-initialise/ #CVE_2026_8037 #Cyberveille", "creation_timestamp": "2026-07-01T10:30:22.191083Z"}, {"uuid": "0e2161d0-6a67-4c63-ad33-0a823ae3f9be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpli5vmihs2k", "content": "\ud83d\udccc Critical Vulnerability in Progress Kemp LoadMaster Leads to Pre-Auth RCE (CVE-2026-8037) https://www.cyberhub.blog/article/28019-critical-vulnerability-in-progress-kemp-loadmaster-leads-to-pre-auth-rce-cve-2026-8037", "creation_timestamp": "2026-07-01T12:07:08.565590Z"}, {"uuid": "437258e6-6e75-457b-ac88-5ee3b46a3ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mplqcvkhho2v", "content": "Progress Kemp LoadMaster CVE-2026-8037 enables unauthenticated OS command injection leading to arbitrary code execution, with active exploitation attempts observed since June 29, 2026.\n", "creation_timestamp": "2026-07-01T14:33:05.085368Z"}, {"uuid": "72267b80-59c7-48d5-a729-c0e5c4fb044a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d2df5079-2286-4d5c-a131-546b27ea662c", "content": "", "creation_timestamp": "2026-07-01T15:00:40.047514Z"}, {"uuid": "58b11587-3fae-4b1e-95ed-c617f1d13cec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116845355489477559", "content": "eSentire, from yesterday: Progress Kemp LoadMaster Vulnerability Targeted (CVE-2026-8037) https://www.esentire.com/security-advisories/progress-kemp-loadmaster-vulnerability-targeted-cve-2026-8037 #infosec #vulnerability", "creation_timestamp": "2026-07-01T15:10:32.785679Z"}, {"uuid": "f5a0481b-6ea3-4df1-a869-3f6b09cb4be9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpltvbcvuw2x", "content": "\ud83e\udd16 CVE-2026-8037 (CVSS 9.6): Pre-auth RCE in Progress Kemp LoadMaster via OS command injection. Active exploitation attempts detected. Patch available.\nhttps://thehackernews.com/2026/07/latest-progress-kemp-loadmaster-pre.html", "creation_timestamp": "2026-07-01T15:37:04.111701Z"}, {"uuid": "20a34331-408e-4eef-8ab7-e9bcd86b83e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mpluecjfdh2d", "content": "Active exploitation attempts target CVE-2026-8037 in Progress Kemp LoadMaster, a critical pre-auth command injection flaw that could enable unauthenticated remote code execution. #ProgressKempLoadMaster #CVE20268037 #eSentire", "creation_timestamp": "2026-07-01T15:45:27.104233Z"}, {"uuid": "a48fb16d-0e39-48bc-bcd8-6d7cfc1a1b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplukubw4724", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-8037: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c Progress Kemp LoadMaster \u043e\u0442 \u0430\u0442\u0430\u043a\n\n\n\nhttps://kripta.biz/posts/36A898CC-E7BF-453D-9E99-54504457A962", "creation_timestamp": "2026-07-01T15:49:06.826251Z"}, {"uuid": "7c42bfb3-1537-414f-9984-b4fb8181d536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mplukubfki2t", "content": "\u8fdb\u5c55 Kemp LoadMaster \u5b58\u5728\u4e25\u91cd\u6f0f\u6d1e CVE-2026-8037:\u653b\u51fb\u8005\u6b63\u5728\u79ef\u6781\u5229\u7528,\u4f01\u4e1a\u5982\u4f55\u5e94\u5bf9?\n\n\n\nhttps://qian.cx/posts/D44F3346-3C0D-4E9F-9760-CA83BFE6CF4D", "creation_timestamp": "2026-07-01T15:49:07.348822Z"}, {"uuid": "6d450ee5-0e31-42ce-aab4-e2bfa2a45fbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://thehackernews.com/2026/07/latest-progress-kemp-loadmaster-pre.html", "content": "A recently disclosed critical security flaw impacting Progress\u202fKemp LoadMaster is seeing active exploitation attempts, according to an advisory from eSentire's Threat Response Unit (TRU).\n\nThe Canadian cybersecurity company said it identified exploitation attempts targeting CVE-2026-8037 (CVSS score: 9.6), an operating system (OS) command injection flaw that could be exploited to achieve", "creation_timestamp": "2026-07-01T16:00:57.881348Z"}, {"uuid": "4a729e70-d872-45b3-8865-914d8e8b10ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mpmctbzgpk2f", "content": "Kemp LoadMaster pre-auth RCE under active exploitation. CVE-2026-8037 gives attackers full control with no login. Patch now.\n#ThreatIntel #ICS\nhttps://threat-intelligence.redeyesecurity.com/blog/kemp-loadmaster-cve-2026-8037-active-exploitation-2026", "creation_timestamp": "2026-07-01T20:04:22.354433Z"}, {"uuid": "c80885ca-1d9b-459c-82a8-0e9d2d7450bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-8037.yaml", "content": "", "creation_timestamp": "2026-07-01T21:00:03.751783Z"}, {"uuid": "49eea859-89ab-4640-b5c4-4bdc64d3b462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-8037.yaml", "content": "", "creation_timestamp": "2026-07-02T00:00:04.308744Z"}, {"uuid": "84ee7e36-3eac-4560-8425-7f8213b251ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://thehackernews.com/2026/07/latest-progress-kemp-loadmaster-pre.html", "content": "A recently disclosed critical security flaw impacting Progress\u202fKemp LoadMaster is seeing active exploitation attempts, according to an advisory from eSentire's Threat Response Unit (TRU).\n\nThe Canadian cybersecurity company said it identified exploitation attempts targeting CVE-2026-8037 (CVSS score: 9.6), an operating system (OS) command injection flaw that could be exploited to achieve", "creation_timestamp": "2026-07-02T01:00:41.968139Z"}, {"uuid": "64c7c070-e15d-4ec1-8fbb-71f3ae3c9f48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mpmtfsscvoo2", "content": "CVE-2026-8037: Critical RCE Vulnerability in Progress Kemp LoadMaster Requires Immediate Patching Introduction: Unveiling the Critical Vulnerability The recently identified CVE-2026-8037 vulnerabil...\n\n#rce #heap #preauthentication #cybersecurity\n\nOrigin | Interest | Match", "creation_timestamp": "2026-07-02T01:01:04.162441Z"}, {"uuid": "f6de9f33-3ece-4496-bf85-e6b48bdef6d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeelzuy422", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:17.133490Z"}, {"uuid": "d582fe74-9dbf-4986-a62c-14776dc8b7df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeem23su22", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:20.718163Z"}, {"uuid": "b5b53c3f-82d5-48d9-b725-e5b876ec4241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeem24s422", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:22.027894Z"}, {"uuid": "60573f97-432e-4916-9b44-ebf9d14b7508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeem26qm22", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:23.739402Z"}, {"uuid": "40e1ef68-6f28-4a48-9210-54d322878fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeem2dmu22", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:27.167421Z"}, {"uuid": "7b911e7f-3344-418c-b448-d4752a18b702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeem25re22", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:22.851609Z"}, {"uuid": "f7b48563-7af7-4271-88d2-33b2ddc6870c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeem2cnm22", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:26.319449Z"}, {"uuid": "bf068dcb-e1d0-495f-84f7-70afd6c16d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeem27pu22", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:24.597495Z"}, {"uuid": "0d0987e7-0bb0-4f4a-998f-33a1640353d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeem2ap422", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:25.483670Z"}, {"uuid": "b2978e55-2a71-47e1-bd16-406fbaed2b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mpohx4nyjm26", "content": "Critical flaw in Progress Kemp LoadMaster (CVE-2026-8037) under active attack. Update now. #CyberSecurity #KempLoadMaster #CVE20268037 #NetworkSecurity #PatchNow #InfoSec thedailytechfeed.com/critical-vul...", "creation_timestamp": "2026-07-02T16:41:19.398781Z"}, {"uuid": "9a0325fe-7e54-473f-9e88-86fdd28c831a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-8037.yaml", "content": "", "creation_timestamp": "2026-07-03T00:00:03.485524Z"}, {"uuid": "78c167ba-f674-4e80-bede-53471db7791e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mpqv26uqz52x", "content": "\ud83d\udd34 EXPLOITED\n\nProgress Kemp LoadMaster has an unauthenticated flaw (CVE-2026-8037) that runs commands as root through its management API.\n\nIt is now being exploited, and a public exploit is out.\n\nFix: update to GA 7.2.63.2 or LTSF 7.2.54.18, and take the API off the internet.", "creation_timestamp": "2026-07-03T15:41:00.272797Z"}, {"uuid": "b3131cf7-be98-4065-8c7e-69925bd20637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://infosec.exchange/ap/users/116769913619325742/statuses/116856800011935767", "content": "\ud83d\udd34 EXPLOITED\nProgress Kemp LoadMaster has an unauthenticated flaw (CVE-2026-8037) that runs commands as root through its management API.\nIt is now being exploited, and a public exploit is out.\nFix: update to GA 7.2.63.2 or LTSF 7.2.54.18, and take the API off the internet.\nhttps://suriq.io/blog/kemp-loadmaster-cve-2026-8037-exploited\n#CVE #Phishing #infosec #cybersecurity", "creation_timestamp": "2026-07-03T15:41:14.543263Z"}, {"uuid": "eb88d08c-3b7b-4a0d-b137-556b2fddb3ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3mprvedjhj32c", "content": "Falla cr\u00edtica en Kemp LoadMaster: root sin clave.\n\nCVE-2026-8037 (severidad 9,8) deja a un atacante sin autenticar ejecutar comandos como root en el balanceador Kemp LoadMaster con una petici\u00f3n armada a su API. Ya hay parche.\n\nLeer en Progress\n\n#LaSe\u00f1alNews #Ciberseguridad #CyberSecurity", "creation_timestamp": "2026-07-04T01:19:20.180152Z"}, {"uuid": "b29b76e9-1285-49df-a870-29449f6ea60f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mps6iw3eyi2d", "content": "CVE-2026-8037: Unauthenticated RCE in Progress Kemp LoadMaster \u2013 Patch Now or Get Pwned +\u00a0Video\n\nIntroduction A critical security flaw in Progress Kemp LoadMaster, tracked as CVE-2026-8037, is currently being actively exploited in the wild. This vulnerability allows unauthenticated attackers to\u2026", "creation_timestamp": "2026-07-04T04:02:58.023816Z"}, {"uuid": "672ee922-262d-454e-8f38-115399335b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mptamqs6262h", "content": "Every internet-facing Progress $PRGS Kemp LoadMaster is now a target. CVE-2026-8037, a CVSS 9.6 command-injection bug, lets an unauthenticated attacker run root commands on the load balancer. Working exploit code went public June 29, and eSentire is already logging exploitation attempts.", "creation_timestamp": "2026-07-04T14:13:33.547010Z"}, {"uuid": "8fc37162-8ccf-4c67-894e-80b3c028c096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mpy42jgs772u", "content": "~Checkpoint~\nMultiple ransomware attacks hit financial and defense sectors; critical CVEs in Oracle EBS, Citrix NetScaler, and Kemp LoadMaster are actively exploited.\n-\nIOCs: CVE-2026-46817, CVE-2026-8451, CVE-2026-8037\n-\n...", "creation_timestamp": "2026-07-06T12:35:05.232201Z"}, {"uuid": "e9bfc9df-73f9-4e01-8266-b9f6c215e7af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116873759457623095", "content": "\ud83d\udcf0 Actively Exploited Kemp LoadMaster Flaw (CVE-2026-8037) Allows Pre-Auth RCE as Root\n\ud83d\udea8 ACTIVE EXPLOITATION: A critical pre-auth RCE flaw in Progress Kemp LoadMaster (CVE-2026-8037) allows root access. PoC is public. Patch immediately to protect your network perimeter! #RCE #CVE #Kemp #Progress #CyberSecurity\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/progress-kemp-loadmaster-flaw-cve-2026-8037-actively-exploited-for-rce/?utm_source=mastodon&utm\u2026", "creation_timestamp": "2026-07-06T15:34:03.391059Z"}, {"uuid": "0b7f07bb-5711-47bf-af44-547e3f2c703d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mpyg3p266f2p", "content": "\ud83d\udea8 ACTIVE EXPLOITATION: A critical pre-auth RCE flaw in Progress Kemp LoadMaster (CVE-2026-8037) allows root access. PoC is public. Patch immediately to protect your network perimeter! #RCE #CVE #Kemp #Progress #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-06T15:34:42.292405Z"}, {"uuid": "137b787a-f339-4f28-9d60-92a26f704cf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/116883699865795430", "content": "Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) https://labs.watchtowr.com/enterprise-tech-in-shell-out-progress-kemp-loadmaster-uninitialized-heap-to-pre-auth-rce-cve-2026-8037/", "creation_timestamp": "2026-07-08T09:42:01.796797Z"}, {"uuid": "bfc47f4e-2e7a-420b-867f-dd81b45440b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mq6hbvadjy2l", "content": "Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037)", "creation_timestamp": "2026-07-09T01:12:03.150218Z"}, {"uuid": "6b2a68af-a87d-4c39-899c-665ff8c21fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-09)", "content": "", "creation_timestamp": "2026-07-10T10:15:06.611946Z"}, {"uuid": "5ae19b03-b879-47d4-9bd3-4437939bb7d2", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a27da8f6-2db3-487b-a9a7-110243974b82", "content": "", "creation_timestamp": "2026-07-11T01:00:13.953990Z"}, {"uuid": "0d20cacd-f997-4b73-b027-12c47afc6f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://t.me/true_secator/8371", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 Microsoft SharePoint Server.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 SharePoint.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2026-45659\u00a0(CVSS 8,8) \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043a\u043e\u043d\u0446\u0435 \u043c\u0430\u044f \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Microsoft, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0449\u0438\u043c \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430 \u0441\u0430\u0439\u0442\u0430, \u0431\u0435\u0437 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\nMicrosoft \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u043d\u0430\u043d\u0438\u0439 \u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0438 \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0443\u0441\u043f\u0435\u0445\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 SharePoint Server Subscription Edition, SharePoint Server 2019, SharePoint Server 2016 \u0438 SharePoint Enterprise Server 2016.\n\nCISA \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0438 \u0434\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u043d\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041f\u043e\u043c\u0438\u043c\u043e CVE-2026-45659 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u044e\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0442 eSentire \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2026-8037\u00a0(CVSS: 9,6) \u0432 Progress Kemp LoadMaster\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c eSentire, CVE-2026-8037\u00a0\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c 29 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 LoadMaster \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, watchTowr Labs \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e escape_quotes() \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0414\u0435\u043b\u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u043b\u0430 \u043e\u0447\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u043e\u043a\u0438 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u043f\u0440\u0438 \u0447\u0442\u0435\u043d\u0438\u0438 \u0432 \u0441\u043e\u0441\u0435\u0434\u043d\u044e\u044e \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u0438 \u043a\u0443\u0447\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u043b\u0430\u0437\u0435\u0439\u043a\u0443 \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /accessv2, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0442 \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u043a\u0443\u0447\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u043d\u0435 \u0438\u043c\u0435\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\neSentire \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u0430\u043a\u043e\u043d\u0447\u0438\u043b\u0438\u0441\u044c \u043d\u0435\u0443\u0434\u0430\u0447\u0435\u0439, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0435 PoC \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0440\u043e\u0441\u0442\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 CVE-2026-8037 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u043c \u0431\u0443\u0434\u0443\u0449\u0435\u043c.\n\n\u041f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u0445\u043e\u0434\u044f\u0442 \u0441\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432: 192.42.116[.]58, 192.42.116[.]105 \u0438 146.70.139[.]154. \u0422\u0430\u043a \u0447\u0442\u043e \u043d\u0430 \u0437\u0430\u043c\u0435\u0442\u043a\u0443.", "creation_timestamp": "2026-07-13T13:00:05.751999Z"}, {"uuid": "5e2a65fa-c802-4250-b9a3-ea62cd5d761e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://t.me/GithubRedTeam/92660", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-8037-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Caster-chen\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 11:51:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u5305\u62ec\u80fd\u6267\u884c\u7684\u547d\u4ee4\u63a2\u6d4b\u548c\u4e00\u952egetshell\uff08\u9700\u8981\u670d\u52a1\u5668\u90e8\u7f72\u670d\u52a1\uff09\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.459912Z"}, {"uuid": "c94d0996-8923-4056-b5d1-cef569d70a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://t.me/GithubRedTeam/92660", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-8037-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Caster-chen\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 11:51:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u5305\u62ec\u80fd\u6267\u884c\u7684\u547d\u4ee4\u63a2\u6d4b\u548c\u4e00\u952egetshell\uff08\u9700\u8981\u670d\u52a1\u5668\u90e8\u7f72\u670d\u52a1\uff09\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:09.882257Z"}, {"uuid": "0c6ca416-40af-464b-9864-ac47a24297a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://t.me/true_secator/8371", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 Microsoft SharePoint Server.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 SharePoint.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2026-45659\u00a0(CVSS 8,8) \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043a\u043e\u043d\u0446\u0435 \u043c\u0430\u044f \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Microsoft, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0449\u0438\u043c \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430 \u0441\u0430\u0439\u0442\u0430, \u0431\u0435\u0437 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\nMicrosoft \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u043d\u0430\u043d\u0438\u0439 \u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0438 \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0443\u0441\u043f\u0435\u0445\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 SharePoint Server Subscription Edition, SharePoint Server 2019, SharePoint Server 2016 \u0438 SharePoint Enterprise Server 2016.\n\nCISA \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0438 \u0434\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u043d\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041f\u043e\u043c\u0438\u043c\u043e CVE-2026-45659 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u044e\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0442 eSentire \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2026-8037\u00a0(CVSS: 9,6) \u0432 Progress Kemp LoadMaster\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c eSentire, CVE-2026-8037\u00a0\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c 29 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 LoadMaster \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, watchTowr Labs \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e escape_quotes() \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0414\u0435\u043b\u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u043b\u0430 \u043e\u0447\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u043e\u043a\u0438 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u043f\u0440\u0438 \u0447\u0442\u0435\u043d\u0438\u0438 \u0432 \u0441\u043e\u0441\u0435\u0434\u043d\u044e\u044e \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u0438 \u043a\u0443\u0447\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u043b\u0430\u0437\u0435\u0439\u043a\u0443 \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /accessv2, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0442 \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u043a\u0443\u0447\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u043d\u0435 \u0438\u043c\u0435\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\neSentire \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u0430\u043a\u043e\u043d\u0447\u0438\u043b\u0438\u0441\u044c \u043d\u0435\u0443\u0434\u0430\u0447\u0435\u0439, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0435 PoC \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0440\u043e\u0441\u0442\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 CVE-2026-8037 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u043c \u0431\u0443\u0434\u0443\u0449\u0435\u043c.\n\n\u041f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u0445\u043e\u0434\u044f\u0442 \u0441\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432: 192.42.116[.]58, 192.42.116[.]105 \u0438 146.70.139[.]154. \u0422\u0430\u043a \u0447\u0442\u043e \u043d\u0430 \u0437\u0430\u043c\u0435\u0442\u043a\u0443.", "creation_timestamp": "2026-07-14T00:00:47.450548Z"}, {"uuid": "ea1f30d1-c425-4ef6-97f4-77517d0a72ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92660", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-8037-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Caster-chen\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 11:51:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u5305\u62ec\u80fd\u6267\u884c\u7684\u547d\u4ee4\u63a2\u6d4b\u548c\u4e00\u952egetshell\uff08\u9700\u8981\u670d\u52a1\u5668\u90e8\u7f72\u670d\u52a1\uff09\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:33.880853Z"}, {"uuid": "f126384f-b2b3-4cda-bbca-14c13e9929a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9384", "content": "\ud83d\udea8 ALERT - Attackers are trying to exploit CVE-2026-8037 in Progress Kemp LoadMaster.\n\nThe CVSS 9.6 flaw enables unauthenticated OS command injection and arbitrary code execution on vulnerable appliances.\n\neSentire says the attempts it saw failed, but PoC details are now public.\n\nRead: https://thehackernews.com/2026/07/latest-progress-kemp-loadmaster-pre.html", "creation_timestamp": "2026-07-15T12:00:03.153138Z"}, {"uuid": "56cab5a8-9cd8-4336-aa9f-ea023cfc5944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9364", "content": "\u26a0\ufe0f Public PoC is out for CVE-2026-8037, a critical Progress Kemp LoadMaster API flaw.\n\nIt lets unauthenticated attackers run root commands when the API is enabled.\n\nPatch now. Restrict API exposure.\n\nFull story: https://thehackernews.com/2026/06/progress-kemp-loadmaster-flaw-could-let.html", "creation_timestamp": "2026-07-15T12:00:03.282603Z"}, {"uuid": "09e2c823-1e4a-4ace-9632-88786715efd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqovuigffi24", "content": "\ud83d\udd17 CVE : CVE-2026-8037, CVE-2026-33691, CVE-2026-8037", "creation_timestamp": "2026-07-15T14:15:34.101703Z"}, {"uuid": "2aebdcc5-756a-4788-9a48-303fa8fa4852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9384", "content": "\ud83d\udea8 ALERT - Attackers are trying to exploit CVE-2026-8037 in Progress Kemp LoadMaster.\n\nThe CVSS 9.6 flaw enables unauthenticated OS command injection and arbitrary code execution on vulnerable appliances.\n\neSentire says the attempts it saw failed, but PoC details are now public.\n\nRead: https://thehackernews.com/2026/07/latest-progress-kemp-loadmaster-pre.html", "creation_timestamp": "2026-07-16T00:00:11.591410Z"}, {"uuid": "16ac4075-44c7-4fab-a22b-057bbe7b64b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9364", "content": "\u26a0\ufe0f Public PoC is out for CVE-2026-8037, a critical Progress Kemp LoadMaster API flaw.\n\nIt lets unauthenticated attackers run root commands when the API is enabled.\n\nPatch now. Restrict API exposure.\n\nFull story: https://thehackernews.com/2026/06/progress-kemp-loadmaster-flaw-could-let.html", "creation_timestamp": "2026-07-16T00:00:19.136283Z"}, {"uuid": "71610294-4d63-43ab-b562-05b4be49146c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "content": "", "creation_timestamp": "2026-07-16T19:00:15.437803Z"}, {"uuid": "458e37c3-d746-46c8-b41d-5ec0243373e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "Telegram/PPrzS3gz9qQLgzr1WoRl3iwYb9bYPZPQYF8TcZKF9BE1m-w", "content": "", "creation_timestamp": "2026-07-16T19:00:26.786989Z"}, {"uuid": "91c8cfcb-13ed-4887-b221-6532094a2ec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "Telegram/kQBPOJZRPfFE-rjb5OWBI31fcS08jxE2VBe_KgzBWEfjeHI", "content": "", "creation_timestamp": "2026-07-16T19:00:26.632830Z"}, {"uuid": "ddd43b55-128f-4757-a97a-6811c7f11ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "content": "", "creation_timestamp": "2026-07-17T00:00:30.867221Z"}, {"uuid": "a281115b-291b-4dd6-99f3-b6cc917c9e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "Telegram/kQBPOJZRPfFE-rjb5OWBI31fcS08jxE2VBe_KgzBWEfjeHI", "content": "", "creation_timestamp": "2026-07-17T00:00:43.005391Z"}, {"uuid": "9259220b-19cd-437b-8ba3-3891a9b62880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "Telegram/PPrzS3gz9qQLgzr1WoRl3iwYb9bYPZPQYF8TcZKF9BE1m-w", "content": "", "creation_timestamp": "2026-07-17T00:00:43.201106Z"}, {"uuid": "b177324f-c904-4d68-a43c-132e77e45053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "Telegram/kQBPOJZRPfFE-rjb5OWBI31fcS08jxE2VBe_KgzBWEfjeHI", "content": "", "creation_timestamp": "2026-07-18T00:00:08.538671Z"}, {"uuid": "23f7bfed-1dbb-4afc-a954-fcb79c3dd1df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "Telegram/PPrzS3gz9qQLgzr1WoRl3iwYb9bYPZPQYF8TcZKF9BE1m-w", "content": "", "creation_timestamp": "2026-07-18T00:00:08.235078Z"}, {"uuid": "2203fa0f-a0ee-4a60-830f-fe43950703b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "content": "", "creation_timestamp": "2026-07-18T00:00:41.755238Z"}, {"uuid": "fed1403c-57c6-4b69-908b-fc89de95ab8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "Telegram/Y9bJcihIH0kSkRnP4M-vOiV0LMyw9ekkVBc0mucwgsXuvA", "content": "", "creation_timestamp": "2026-07-18T13:00:04.607446Z"}, {"uuid": "99fc0f48-8d8d-41a3-bb03-79dcd291cdb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "Telegram/Y9bJcihIH0kSkRnP4M-vOiV0LMyw9ekkVBc0mucwgsXuvA", "content": "", "creation_timestamp": "2026-07-19T00:00:27.482443Z"}]}