ZDI-CAN-29249: ZDI-26-319: Progress Software Kemp LoadMaster addcountry Command Injection Remote Code Execution Vulnerability
Published May 21, 2026
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-3517.
Affected Software
1 affected component
Progress Software Kemp LoadMaster
Event History
May 21, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-29249?
ZDI-CAN-29249 has a CVSS rating of 8.8, indicating a high severity level.
2
How do I fix ZDI-CAN-29249?
To fix ZDI-CAN-29249, apply the latest security patches provided by Progress Software for Kemp LoadMaster.
3
Who can exploit ZDI-CAN-29249?
ZDI-CAN-29249 can be exploited by authenticated users with access to the affected Kemp LoadMaster installations.
4
What type of vulnerability is ZDI-CAN-29249?
ZDI-CAN-29249 is a command injection vulnerability that allows remote code execution.
5
Which software is affected by ZDI-CAN-29249?
ZDI-CAN-29249 affects installations of Progress Software Kemp LoadMaster.