Critical Progress Kemp LoadMaster Flaw Added to CISA KEV Catalog Amid Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical-severity command injection flaw (CVE-2026-8037, CVSS score: 9.6) impacting Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability allows unauthenticated attackers to execute arbitrary commands on susceptible devices, with 792 exploitation attempts observed over the last 41 days.