Executive Summary

A remote code execution vulnerability (CVE-2026-8037) exists in Progress Software's Kemp LoadMaster due to an uninitialized memory issue in the escape_quotes function. Authentication is required to exploit. The Zero Day Initiative rated it CVSS 7.2.

---

Intelligence Metadata - Source Publisher: Zero Day Initiative - Published Date: 2026-09-09T05:00:00+00:00 - Category: cves

Original Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-8037.

"Everything can be taken from a man but ... the last of the human freedoms � to choose ones attitude in any given set of circumstances, to choose ones own way."

— Victor Frankl