What Happened (Plain English)
High-risk Progress Software LoadMaster weakness requires patching (CVE-2026-8037) affects Progress Software LoadMaster. FIRST EPSS telemetry places exploitation probability at 99.79%. With a CVSS score of 9.6 (CRITICAL), security teams should verify affected deployments and prioritize remediation according to exposure.
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints Unpatched internet-facing or user-accessible instances risk unauthorized execution, data exposure, or service disruption.
Affected Software & Weakness
Vendor: Progress Software · Product: LoadMaster · Versions: LoadMaster V7.2.60.0, LoadMaster V7.2.54.12, ECS Connections Manager V7.2.60.0 · CWE: CWE-77
The Fix
Verify your installed LoadMaster version against Progress Software's official security bulletin for CVE-2026-8037, apply the patched build in a staging ring first when possible, and confirm rollout across all production nodes.
Temporary Workarounds
If patching Progress Software LoadMaster cannot happen today, place management ports behind VPN or zero-trust access, restrict untrusted network ingress, and enforce multi-factor authentication on administrative sessions.
Detection & Log Checks
Inspect LoadMaster application logs, perimeter firewall denies/allows, and EDR process trees for unusual child processes or outbound connections correlated with CVE-2026-8037 (CWE-77).
Frequently Asked Questions
Is CVE-2026-8037 actively exploited?
No KEV listing yet, but EPSS exploitation probability is 99.79%.
What is the fix for CVE-2026-8037?
Upgrade LoadMaster to >= V7.2.63.2 (CVE-2026-8037 vendor patch).
Which Progress Software products are affected?
Progress Software LoadMaster (LoadMaster V7.2.60.0, LoadMaster V7.2.54.12, ECS Connections Manager V7.2.60.0).
How urgent is patching CVE-2026-8037?
Priority queue: THIS-WEEK (CVSS 9.6, EPSS 99.79%).
Official References
Last verified: 2026-11-13 · Defensive checklist only.