ZDI-CAN-30439: ZDI-26-341: Progress Software Kemp LoadMaster dolistapikeys Uninitialized Memory Remote Code Execution Vulnerability
Published Jun 9, 2026
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-8037.
Affected Software
1 affected component
Progress Software Kemp LoadMaster
Event History
Jun 9, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-30439?
The severity of ZDI-CAN-30439 is rated at 7.2 on the CVSS scale.
2
How do I fix ZDI-CAN-30439?
To fix ZDI-CAN-30439, ensure that you apply the latest security patches provided by Progress Software for Kemp LoadMaster.
3
What type of attack does ZDI-CAN-30439 allow?
ZDI-CAN-30439 allows remote attackers to execute arbitrary code on vulnerable installations.
4
Is authentication required to exploit ZDI-CAN-30439?
Yes, authentication is required to successfully exploit ZDI-CAN-30439.
5
What CVE is associated with ZDI-CAN-30439?
The CVE associated with ZDI-CAN-30439 is CVE-2026-8037.