ZDI-26-482: Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability

Published Jul 29, 2026

Updated

This vulnerability allows remote attackers to escalate privileges on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-59689.

Affected Software

1 affected component

Progress Software Kemp LoadMaster

Event History

Jul 29, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-26-482?

The severity of ZDI-26-482 is rated as 8.8, indicating a high risk level.

How do I fix ZDI-26-482?

To fix ZDI-26-482, update your Progress Software Kemp LoadMaster to the latest version provided by the vendor.

What type of vulnerability is ZDI-26-482?

ZDI-26-482 is a privilege escalation vulnerability due to the use of a hard-coded cryptographic key.

Who is affected by ZDI-26-482?

Organizations using affected versions of Progress Software Kemp LoadMaster are at risk from ZDI-26-482.

Is authentication required to exploit ZDI-26-482?

Yes, authentication is required to exploit ZDI-26-482.

ZDI-26-482: Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of ZDI-26-482?

How do I fix ZDI-26-482?

What type of vulnerability is ZDI-26-482?

Who is affected by ZDI-26-482?

Is authentication required to exploit ZDI-26-482?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of ZDI-26-482?

How do I fix ZDI-26-482?

What type of vulnerability is ZDI-26-482?

Who is affected by ZDI-26-482?

Is authentication required to exploit ZDI-26-482?