Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity command injection vulnerability in Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, CVE-2026-8037 (CVSS score: 9.6), allows unauthenticated attackers to execute arbitrary code remotely. It follows reports of over 792 exploitation attempts from 65 IP addresses across 18 countries between July 16 and August 4, 2026. CISA urges immediate patching by FCEB agencies to comply with BOD 26-04.