cve 2026 8037

This tag covers CVE-2026-8037, a command-injection vulnerability in Progress LoadMaster that CISA added to its Known Exploited Vulnerabilities catalog after evidence of active exploitation. Administrators are urged to identify exposed LoadMaster appliances with the API enabled and update to fixed releases, specifically LoadMaster GA 7.2.63.2 or LTSF 7.2.54.18, which Progress issued in June. The tag also discusses CISA's Binding Operational Directive 26-04, which gives federal civilian agencies a short deadline to remediate, and pairs the KEV entry with forensic-triage guidance. Content focuses on practical patch management, exposure assessment, and compliance steps for IT teams handling affected systems.