CISA adds exploited Progress LoadMaster flaw to KEV catalog

CISA added CVE-2026-8037, a critical Progress Kemp LoadMaster vulnerability, to its Known Exploited Vulnerabilities catalog and told federal agencies to patch it within three days, SecurityWeek reported. The flaw is an unauthenticated OS command injection that can permit remote code execution, according to Progress' advisory. The report says exploitation began after technical details and proof-of-concept code were published in late June. Affected products also include ECS Connection Manager, Connection Manager for ObjectScale, and MOVEit WAF.