Vulnerability Details CVE-2026-8037
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints
Exploit prediction scoring system (EPSS) score
EPSS Score 0.434
EPSS Ranking 98.6%
CVSS Severity
CVSS v3 Score 9.6
References
Products affected by CVE-2026-8037
-
cpe:2.3:o:progress:loadmaster:7.2.55.0
-
cpe:2.3:o:progress:loadmaster:7.2.56.0
-
cpe:2.3:o:progress:loadmaster:7.2.56.2
-
cpe:2.3:o:progress:loadmaster:7.2.57.0
-
cpe:2.3:o:progress:loadmaster:7.2.58.0
-
cpe:2.3:o:progress:loadmaster:7.2.59.0
-
cpe:2.3:o:progress:loadmaster:7.2.59.1
-
cpe:2.3:o:progress:loadmaster:7.2.59.2
-
cpe:2.3:o:progress:loadmaster:7.2.59.3
-
cpe:2.3:o:progress:loadmaster:7.2.59.4
-
cpe:2.3:o:progress:loadmaster:7.2.60.0
-
cpe:2.3:o:progress:loadmaster:7.2.60.1
-
cpe:2.3:o:progress:loadmaster:7.2.61.0
-
cpe:2.3:o:progress:loadmaster:7.2.61.1
-
cpe:2.3:o:progress:loadmaster:7.2.62.0
-
cpe:2.3:o:progress:loadmaster:7.2.62.2
-
cpe:2.3:o:progress:loadmaster:7.2.63.1