PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-8037 Progress Software CVE debrief

The CVE-2026-8037 Progress LoadMaster Command Injection Vulnerability has been added to the CISA Known Exploited Vulnerabilities catalog. Progress Software LoadMaster products are affected by a command injection vulnerability, which could allow an attacker to execute arbitrary commands. The vulnerability has a CVSS score of 9.6 and is considered critical.

Vendor
Progress Software
Product
LoadMaster
CVSS
CRITICAL 9.6
CISA KEV
Listed
Original CVE published
2026-08-07
Original CVE updated
2026-08-07
Advisory published
2026-08-07
Advisory updated
2026-08-07

Who should care

Defenders and security teams responsible for Progress LoadMaster products should assess exposure and apply mitigations. This includes IT administrators, security engineers, and compliance teams who need to ensure adherence to CISA's BOD 26-04 guidance.

Why it matters

The CVE-2026-8037 Progress LoadMaster Command Injection Vulnerability is a critical vulnerability that requires immediate attention from defenders. It has been added to the CISA Known Exploited Vulnerabilities catalog, indicating that it is known to be exploited in the wild. Defenders should assess exposure, prioritize patching or applying mitigations, and monitor for potential exploitation attempts.

  • Verify exposure of Progress LoadMaster products in your environment
  • Assess potential for command injection attacks
  • Prioritize patching or applying mitigations
  • Monitor for potential exploitation attempts

Technical summary

The Progress LoadMaster Command Injection Vulnerability (CVE-2026-8037) is a critical vulnerability with a CVSS score of 9.6. It allows an attacker to execute arbitrary commands on affected Progress Software LoadMaster products. This vulnerability has been added to the CISA Known Exploited Vulnerabilities catalog, indicating that it is known to be exploited in the wild.

Defensive priority

High priority should be given to assessing exposure and applying mitigations, as this vulnerability has been added to the CISA Known Exploited Vulnerabilities catalog.

Recommended defensive actions

  • Assess exposure of Progress LoadMaster products in your environment
  • Apply mitigations in accordance with vendor instructions
  • Ensure compliance with CISA's BOD 26-04 guidance

Evidence notes

The CISA Known Exploited Vulnerabilities catalog and CVE Program record provide official information about this vulnerability. However, details about exploitation and affected versions are limited.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-8037 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-8037

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-8037 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-8037

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

  • CISA Known Exploited Vulnerabilities catalog

    Publisher, destination, and source semantics verified

    URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

    Cybersecurity and Infrastructure Security Agency - Official CISA catalog of vulnerabilities known to be exploited in the wild.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.