Vulnerability Details CVE-2026-8037
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints
Exploit prediction scoring system (EPSS) score
EPSS Score 0.993
EPSS Ranking 99.9%
CVSS Severity
CVSS v3 Score 9.6
Proposed Action
Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints.
Ransomware Campaign
Unknown
Products affected by CVE-2026-8037
-
cpe:2.3:a:progress:connection_manager_for_objectscale:7.2.62.0
-
cpe:2.3:a:progress:connection_manager_for_objectscale:7.2.62.2
-
cpe:2.3:a:progress:connection_manager_for_objectscale:7.2.63.1
-
cpe:2.3:a:progress:ecs_connection_manager:7.2.59.3
-
cpe:2.3:a:progress:ecs_connection_manager:7.2.59.4
-
cpe:2.3:a:progress:ecs_connection_manager:7.2.60.0
-
cpe:2.3:a:progress:ecs_connection_manager:7.2.60.1
-
cpe:2.3:a:progress:ecs_connection_manager:7.2.61.0
-
cpe:2.3:a:progress:ecs_connection_manager:7.2.61.1
-
cpe:2.3:a:progress:ecs_connection_manager:7.2.62.0
-
cpe:2.3:a:progress:ecs_connection_manager:7.2.62.2
-
cpe:2.3:a:progress:ecs_connection_manager:7.2.63.1
-
cpe:2.3:a:progress:moveit_web_application_firewall:7.2.62.1
-
cpe:2.3:a:progress:moveit_web_application_firewall:7.2.62.2
-
cpe:2.3:a:progress:moveit_web_application_firewall:7.2.63.1
-
cpe:2.3:o:progress:loadmaster:7.0-10
-
cpe:2.3:o:progress:loadmaster:7.0-4
-
cpe:2.3:o:progress:loadmaster:7.0-6
-
cpe:2.3:o:progress:loadmaster:7.0-7
-
cpe:2.3:o:progress:loadmaster:7.0-8
-
cpe:2.3:o:progress:loadmaster:7.1-16
-
cpe:2.3:o:progress:loadmaster:7.1-22
-
cpe:2.3:o:progress:loadmaster:7.2.40.0
-
cpe:2.3:o:progress:loadmaster:7.2.48.1
-
cpe:2.3:o:progress:loadmaster:7.2.48.10
-
cpe:2.3:o:progress:loadmaster:7.2.48.11
-
cpe:2.3:o:progress:loadmaster:7.2.48.12
-
cpe:2.3:o:progress:loadmaster:7.2.48.2
-
cpe:2.3:o:progress:loadmaster:7.2.48.3
-
cpe:2.3:o:progress:loadmaster:7.2.48.4
-
cpe:2.3:o:progress:loadmaster:7.2.48.5
-
cpe:2.3:o:progress:loadmaster:7.2.48.6
-
cpe:2.3:o:progress:loadmaster:7.2.48.7
-
cpe:2.3:o:progress:loadmaster:7.2.48.8
-
cpe:2.3:o:progress:loadmaster:7.2.48.9
-
cpe:2.3:o:progress:loadmaster:7.2.49.0
-
cpe:2.3:o:progress:loadmaster:7.2.54.0
-
cpe:2.3:o:progress:loadmaster:7.2.54.1
-
cpe:2.3:o:progress:loadmaster:7.2.54.10
-
cpe:2.3:o:progress:loadmaster:7.2.54.11
-
cpe:2.3:o:progress:loadmaster:7.2.54.12
-
cpe:2.3:o:progress:loadmaster:7.2.54.13
-
cpe:2.3:o:progress:loadmaster:7.2.54.14
-
cpe:2.3:o:progress:loadmaster:7.2.54.15
-
cpe:2.3:o:progress:loadmaster:7.2.54.16
-
cpe:2.3:o:progress:loadmaster:7.2.54.17
-
cpe:2.3:o:progress:loadmaster:7.2.54.2
-
cpe:2.3:o:progress:loadmaster:7.2.54.2.21253
-
cpe:2.3:o:progress:loadmaster:7.2.54.3
-
cpe:2.3:o:progress:loadmaster:7.2.54.4
-
cpe:2.3:o:progress:loadmaster:7.2.54.5
-
cpe:2.3:o:progress:loadmaster:7.2.54.6
-
cpe:2.3:o:progress:loadmaster:7.2.54.7
-
cpe:2.3:o:progress:loadmaster:7.2.54.8
-
cpe:2.3:o:progress:loadmaster:7.2.54.9
-
cpe:2.3:o:progress:loadmaster:7.2.55.0
-
cpe:2.3:o:progress:loadmaster:7.2.56.0
-
cpe:2.3:o:progress:loadmaster:7.2.56.2
-
cpe:2.3:o:progress:loadmaster:7.2.57.0
-
cpe:2.3:o:progress:loadmaster:7.2.58.0
-
cpe:2.3:o:progress:loadmaster:7.2.59.0
-
cpe:2.3:o:progress:loadmaster:7.2.59.1
-
cpe:2.3:o:progress:loadmaster:7.2.59.2
-
cpe:2.3:o:progress:loadmaster:7.2.59.3
-
cpe:2.3:o:progress:loadmaster:7.2.59.4
-
cpe:2.3:o:progress:loadmaster:7.2.60.0
-
cpe:2.3:o:progress:loadmaster:7.2.60.1
-
cpe:2.3:o:progress:loadmaster:7.2.61.0
-
cpe:2.3:o:progress:loadmaster:7.2.61.1
-
cpe:2.3:o:progress:loadmaster:7.2.62.0
-
cpe:2.3:o:progress:loadmaster:7.2.62.2
-
cpe:2.3:o:progress:loadmaster:7.2.63.1