RansomwarecriticalExploited in the wild

Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre

The Hacker Newsby @TheHackersNewsJun 30, 2026 · 08:03 UTC (Jun 30, 2026)3 min read2

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-8037 CVE-2026-33691 CVE-2024-1212

Tags: cve-2024-1212 cve-2026-33691 cve-2026-8037 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-1212	Unauthenticated OS Command Injection RCE in Progress Kemp LoadMaster	9.8	95%	KEV	Feb 21, 2024 KEV Nov 18, 2024
CVE-2026-33691	The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls	7.5	4%		Apr 2, 2026
CVE-2026-8037	Unauthenticated OS Command Injection RCE in Progress Kemp LoadMaster	9.8	100%	KEVPoC	Jun 4, 2026 KEV Aug 7, 2026

From the original article

3 min read at thehackernews.com

 Swati Khandelwal  Jun 30, 2026 Vulnerability / API Security A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API. The flaw, tracked as CVE-2026-8037 , carries a CVSS score of 9. 8 according to ZDI .

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.