https://reddit.com/r/cybersecurity/comments/1uj2avm/enterprise_tech_in_shell_out_progress_kemp/: Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) - watchTowr Labs
Published Jun 29, 2026
·Updated
Affected Software
2 affected components
Progress Kemp LoadMaster
Progress LoadMaster
Frequently Asked Questions
1
What is the severity of CVE-2026-8037?
The severity of CVE-2026-8037 is critical due to its potential for remote code execution.
2
How do I fix CVE-2026-8037?
To fix CVE-2026-8037, ensure you update to the latest version of Progress Kemp LoadMaster.
3
What systems are affected by CVE-2026-8037?
CVE-2026-8037 affects Progress Kemp LoadMaster systems that have not applied the necessary security patches.
4
What could happen if CVE-2026-8037 is exploited?
If exploited, CVE-2026-8037 could allow an attacker to execute arbitrary code on the affected system.
5
Is there a workaround for CVE-2026-8037 until a patch is applied?
Until a patch is applied for CVE-2026-8037, it is recommended to restrict access to the LoadMaster administrative interface.