TLDR Tech / InfoSec
Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037)
CVE-2026-8037 is a pre-authentication remote code execution vulnerability in Progress Kemp LoadMaster, exploitable via the LoadMaster API when enabled due to an uninitialized heap condition. The vulnerability allows unauthenticated attackers to execute code by exploiting improper memory initialization during API request processing. Defenders should patch to LoadMaster version 7.2.63.2, which addresses the flaw by modifying the escape_quotes() routine, and monitor API access logs for unauthorized activity.
Read the full story