ZDI-26-482: Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability
Published Jul 29, 2026
·Updated
This vulnerability allows remote attackers to escalate privileges on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-59689.
Affected Software
1 affected component
Progress Software Kemp LoadMaster
Event History
Jul 29, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-26-482?
The severity of ZDI-26-482 is rated as 8.8, indicating a high risk level.
2
How do I fix ZDI-26-482?
To fix ZDI-26-482, update your Progress Software Kemp LoadMaster to the latest version provided by the vendor.
3
What type of vulnerability is ZDI-26-482?
ZDI-26-482 is a privilege escalation vulnerability due to the use of a hard-coded cryptographic key.
4
Who is affected by ZDI-26-482?
Organizations using affected versions of Progress Software Kemp LoadMaster are at risk from ZDI-26-482.
5
Is authentication required to exploit ZDI-26-482?
Yes, authentication is required to exploit ZDI-26-482.