ZDI-26-319: Progress Software Kemp LoadMaster addcountry Command Injection Remote Code Execution Vulnerability
Published May 21, 2026
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-3517.
Affected Software
1 affected component
Progress Software Kemp LoadMaster
Event History
May 21, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-26-319?
The severity of ZDI-26-319 is rated with a CVSS score of 8.8, indicating high risk.
2
How do I fix ZDI-26-319?
To fix ZDI-26-319, apply the latest security updates provided by Progress Software for Kemp LoadMaster.
3
What type of attack does ZDI-26-319 involve?
ZDI-26-319 involves a command injection vulnerability that allows remote code execution.
4
Is authentication required to exploit ZDI-26-319?
Yes, authentication is required to exploit the ZDI-26-319 vulnerability.
5
Which software is affected by ZDI-26-319?
The affected software for ZDI-26-319 is Progress Software Kemp LoadMaster.