Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts

A critical security flaw in Progress Kemp LoadMaster is being actively exploited, according to eSentire's Threat Response Unit. The vulnerability, identified as CVE-2026-8037, has a CVSS score of 9.6 and allows for operating system command injection. Exploitation of this flaw can be achieved without authentication, making it a pre-authentication remote code execution vulnerability. eSentire's advisory indicates that attackers are already targeting this vulnerability. The flaw's high CVSS score indicates a significant level of severity. Active exploitation attempts suggest that attackers are moving quickly to take advantage of the vulnerability.