CVE-2026-8037

exploitation · critical · Evidence score 90

Vendor

Progress

Affected software

Progress LoadMaster

Exploitation signal

Listed in CISA Known Exploited Vulnerabilities

EPSS

0.99311

Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints.