Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-8037

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints
Exploit prediction scoring system (EPSS) score
EPSS Score 0.993
EPSS Ranking 99.9%
CVSS Severity
CVSS v3 Score 9.6
Proposed Action
Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints.
Ransomware Campaign
Unknown
Products affected by CVE-2026-8037


Contact Us

Shodan ® - All rights reserved