{"vulnerability": "CVE-2026-8037", "sightings": [{"uuid": "6d5e0ae2-38a3-43a0-a072-e9f789761ce6", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9e500460-ce3f-41da-bc7c-58d8ebe5193e", "content": "", "creation_timestamp": "2026-08-07T18:00:02.209455Z"}, {"uuid": "d0b69ed3-8ca3-4c65-ac1b-73a7489bd288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3msjbhnohgq2t", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-8037: Progress LoadMaster Command Injection Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-8037", "creation_timestamp": "2026-08-07T19:17:33.338415Z"}, {"uuid": "d4540643-24fe-4f26-9978-03502499e0a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3msjdoesmn32e", "content": "Rapid reaction gets you ahead. 39 days before CISA added CVE-2026-8037 Remote Code Execution in Progress Kemp LoadMaster to KEV, watchTowr clients were aware of their exposure.\n\nReach out via our website if you need\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2085810923378233491)", "creation_timestamp": "2026-08-07T19:57:06.970943Z"}, {"uuid": "69c2af44-9add-4e16-884c-b95c57d7d7b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mteaipjymq2w", "content": "\ud83d\udc1b VULNERABILITIES Darkfeed News: \u26a0\ufe0f New Actively-Exploited Vulnerability\n\u2022 CVE: CVE-2026-8037\n\u2022 Vendor: Progress\n\u2022 Product: LoadMast...\nhttps://darkfeed.io #CVE #ZeroDay #PatchManagement", "creation_timestamp": "2026-08-18T12:42:08.059909Z"}, {"uuid": "ce6404ff-07a0-4f33-859b-650c630f209d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3msulk5qrvq25", "content": "\ud83d\udcf0 Critical Progress LoadMaster Kini Aktif Dieksploitasi untuk Menyerang Sistem yang Belum Dipatch\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/12/cve-2026-8037-progress-loadmaster-exploit/\n\n#adc #applicationDeliveryController #cisa #commandInjection #cve-2026-8037 #cybersecur", "creation_timestamp": "2026-08-12T07:17:11.829240Z"}, {"uuid": "9f50c207-4c74-4a7b-9dbc-57172972143b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mskh2hg7yr2c", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-8037: \u26a0\ufe0f CVE-2026-8037: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 84.8%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-8037-os-command-injection-remote-code-execution", "creation_timestamp": "2026-08-08T06:30:12.987877Z"}, {"uuid": "e4dee145-91e5-46c5-b96c-43123635dbb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mskmbmgaem2r", "content": "CISA added CVE-2026-8037, a 9.6 command-injection flaw in Progress Kemp LoadMaster, to KEV after reports of active exploitation in the wild.\n", "creation_timestamp": "2026-08-08T08:03:42.072742Z"}, {"uuid": "97fcf957-3abd-46b3-a86f-82a45445b8e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "exploited", "source": "https://t.me/thehackernews/9751", "content": "\ud83d\udea8 Attackers are exploiting a LoadMaster flaw for command execution.\n\nCVE-2026-8037 lets unauthenticated attackers run arbitrary commands on affected appliances. KEVIntel logged 792 exploitation attempts from 65 IPs in 41 days.\n\nWhat defenders need to know: https://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.html", "creation_timestamp": "2026-08-08T09:00:04.011926Z"}, {"uuid": "e6772438-61aa-44d8-9251-a8b53a5feca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity security flaw impacting Progress\u202fKemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-8037 (CVSS score: 9.6), is a command injection flaw that could be weaponized to achieve arbitrary", "creation_timestamp": "2026-08-08T10:00:41.353478Z"}, {"uuid": "216fbc66-b9f2-40f9-8880-50380da1caaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://t.me/pphm_HackerNews/2545", "content": "\ud83d\udd34 CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability\n\nThe US cybersecurity agency CISA has urged federal agencies to immediately patch a critical-severity vulnerability in Progress Kemp LoadMaster that has been exploited in the wild.\n\nTracked as CVE-2026-8037 (CVSS score of 9.6), the flaw is described as an OS command injection that could be exploited without authentication for remote code execution (RCE).\n\nAccording to Progress\u2019 advisory, a remote attacker could exploit the bug through unsanitized API inputs to execute arbitrary commands on the LoadMaster appliance.\n\nDisclosed on June 4 alongside CVE-2026-33691, the security defect also affects ECS Connection Manager, Connection Manager for ObjectScale, and MOVEit WAF.", "creation_timestamp": "2026-08-21T23:00:06.629858Z"}, {"uuid": "1d896c95-6467-4084-9e7f-2f80dd563393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mskzrgy2je2o", "content": "CISA Sounds the Alarm on Progress LoadMaster: Critical CVE-2026-8037 Is Now Under Active Exploitation +\u00a0Video\n\nA New Warning for Internet-Facing Infrastructure A dangerous vulnerability in Progress Kemp LoadMaster appliances has moved from a serious security concern to an urgent exploitation\u2026", "creation_timestamp": "2026-08-08T12:05:12.008694Z"}, {"uuid": "53fbc1ed-08bf-4e30-8d2b-2ee3ef7b2007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3msljdx7odh2r", "content": "\ud83e\udd16 CVE-2026-8037 (CVSS 9.6): command injection in Progress Kemp LoadMaster added to CISA KEV after 792 exploit attempts. Actively exploited, arbitrary code execution risk.\nhttps://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.html", "creation_timestamp": "2026-08-08T16:43:58.757726Z"}, {"uuid": "d91f9304-d772-4abc-b01b-f758c9b725f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/z3usalmighty.bsky.social/post/3mslnrjoqph2o", "content": "Another day, another KEV entry: CVE-2026-8037 in Progress LoadMaster. Command injection is a favorite for attackers because it hands over the box. Check your exposure and patch before this becomes your incident.", "creation_timestamp": "2026-08-08T18:03:09.286307Z"}, {"uuid": "4801868a-37f1-4831-9027-c5ad2a94f1d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-552", "content": "", "creation_timestamp": "2026-06-05T10:19:13.000000Z"}, {"uuid": "40b31496-6529-4e2d-ac0e-f9344be99049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/116699833514512441", "content": "Setzt jemand auf den Progress Kemp Loadmaster?\nhttps://borncity.com/blog/2026/06/05/progress-kemp-loadmaster-mit-zwei-kritischen-schwachstellen-cve-2026-8037-cve-2026-33691/", "creation_timestamp": "2026-06-05T22:22:23.877384Z"}, {"uuid": "1580bb15-9f81-4f8a-bad8-9310f1e70177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity security flaw impacting Progress\u202fKemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-8037 (CVSS score: 9.6), is a command injection flaw that could be weaponized to achieve arbitrary", "creation_timestamp": "2026-08-09T01:00:38.387427Z"}, {"uuid": "ac73dbf1-e713-4ef0-89f5-726e04fc5c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "exploited", "source": "https://t.me/thehackernews/9751", "content": "\ud83d\udea8 Attackers are exploiting a LoadMaster flaw for command execution.\n\nCVE-2026-8037 lets unauthenticated attackers run arbitrary commands on affected appliances. KEVIntel logged 792 exploitation attempts from 65 IPs in 41 days.\n\nWhat defenders need to know: https://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.html", "creation_timestamp": "2026-08-09T01:26:04.749991Z"}, {"uuid": "94ea403e-c2f7-4e2c-8dc7-905878e3f9cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "exploited", "source": "Telegram/yLcUnFqdiZeXQa6ykZI9T-7RYqe6vwaVNu7rALRbEUJQ0g", "content": "", "creation_timestamp": "2026-08-09T02:00:03.826064Z"}, {"uuid": "d965cef3-fc6d-444d-b74b-73e1e9e31698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msn4ama5o42y", "content": "792 exploit attempts. One load balancer. Zero excuses left.\n\nCVE-2026-8037.\n\nhttps://www.yazoul.net/news/article/progress-kemp-loadmaster-flaw-hits-cisa-kev-after-792-reported-exploit-attempts/\n\nby Yazoul AI #InfoSec #ThreatIntel", "creation_timestamp": "2026-08-09T07:54:48.879006Z"}, {"uuid": "28bc324d-9fb1-4d00-af84-0f3482498fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117066849817324344", "content": "\ud83d\udcf0 CISA Adds Progress Kemp LoadMaster Flaw to KEV Catalog After Exploits\n\ud83d\udea8 CISA KEV ALERT: A critical command injection flaw in Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6) is actively exploited. Unauthenticated attackers can gain full control. Federal agencies must patch by Aug 10. #CVE #CISA #KEV #PatchNow\n\ud83d\udd17 https://cyber.netsecops.io/articles/progress-kemp-loadmaster-flaw-cve-2026-8037-added-to-cisa-kev-catalog/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=daily", "creation_timestamp": "2026-08-09T17:59:28.818278Z"}, {"uuid": "2107d2e6-de87-47d9-afb7-94493fa1fa1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mso62uu7id2i", "content": "\ud83d\udea8 CISA KEV ALERT: A critical command injection flaw in Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6) is actively exploited. Unauthenticated attackers can gain full control. Federal agencies must patch by Aug 10. #CVE #CISA #KEV #PatchNow\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-09T18:00:03.368064Z"}, {"uuid": "fb59bb9b-8918-440b-a9de-693e032a1e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sipirtu.com/post/3msnq52sjw72i", "content": "CISA adds CVE-2026-8037 to its Known Exploited Vulnerabilities Catalog, requiring federal agencies to prioritize remediation under BOD 26-04. The Progress LoadMaster command injection flaw poses risks to automation and infrastructure security.\n\nSource: CISA Advisories", "creation_timestamp": "2026-08-09T13:50:43.286738Z"}, {"uuid": "d6487713-2149-4c27-b4a0-468b23c5b908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "exploited", "source": "Telegram/yLcUnFqdiZeXQa6ykZI9T-7RYqe6vwaVNu7rALRbEUJQ0g", "content": "", "creation_timestamp": "2026-08-10T00:00:34.568646Z"}, {"uuid": "0f4c0bb3-bcb8-46a2-b3e6-98f5b923d1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/stechtimes.com/post/3msoyvf2lhc2h", "content": "CISA Adds Progress LoadMaster Flaw After 792 Exploit Attempts\n\nThe Hacker News covered CISA's KEV listing for CVE-2026-8037 after KEVIntel telemetry counted 792 exploitation attempts against Progress Kemp LoadMaster over 41 days.\n\n#Cybersecurity\n\nLink card below.", "creation_timestamp": "2026-08-10T02:00:09.060746Z"}, {"uuid": "d5ec3769-a24a-487e-b45f-cd6f2f428be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3msozl4d6mj2t", "content": "CISA Adds Progress LoadMaster Flaw After 792 Exploit Attempts\n\nThe Masher News covered CISA's KEV listing for CVE-2026-8037 after KEVIntel telemetry counted 792 exploitation attempts against Progress Kemp LoadMaster over 41 days.\n\n#Potatosecurity\n\nLink card below.", "creation_timestamp": "2026-08-10T02:12:17.934166Z"}, {"uuid": "ce4b1a85-a773-442f-b30e-302cdee91df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mspor5rmrg2g", "content": "792 exploit attempts. One flaw. Zero patch in sight.\n\nCVE-2026-8037.\nProgress Kemp LoadMaster.\nCVSS 9.8 critical.\n\nhttps://www.yazoul.net/malware/agent-tesla-2026-08/reports/2026-08-09/\n\nby Yazoul AI #CyberSecurity #PatchNow", "creation_timestamp": "2026-08-10T08:31:29.358762Z"}, {"uuid": "99d5ca01-2535-48f0-9de1-81d5d57d4d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "96c16751-1b73-43f8-8ab4-831c0a20223d", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "https://github.com/Caster-chen/CVE-2026-8037-POC", "content": "", "creation_timestamp": "2026-08-10T08:41:48.858491Z"}, {"uuid": "5d3e76da-d58f-4134-b6d1-a4773d272b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mspse7ecp32h", "content": "CISA\u3001Progress LoadMaster\u306e\u60aa\u7528\u6e08\u307f\u8106\u5f31\u6027\u3078\u306e\u5373\u6642\u30d1\u30c3\u30c1\u9069\u7528\u3092\u8981\u8acb\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6a5f\u95a2CISA\u306f\u3001Progress Kemp LoadMaster\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u5ea6\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u306e\u8106\u5f31\u6027\u304c\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u3001\u9023\u90a6\u653f\u5e9c\u6a5f\u95a2\u306b\u5bfe\u3057\u5373\u6642\u306e\u30d1\u30c3\u30c1\u9069\u7528\u3092\u8981\u8acb\u3057\u307e\u3057\u305f\u3002 CVE-2026-8037(CVSS\u30b9\u30b3\u30a29.6)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u6b20\u9665\u306f\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u60aa\u7528\u53ef\u80fd\u306aOS\u30b3...", "creation_timestamp": "2026-08-10T09:35:49.853689Z"}, {"uuid": "87237b26-b52d-4dc1-9bdf-b056ffd445a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mspssqirco22", "content": "CISA urged immediate patching of Progress Kemp LoadMaster CVE-2026-8037, a critical unauthenticated OS command injection exploited in the wild for root-level RCE.\n", "creation_timestamp": "2026-08-10T09:43:58.924728Z"}, {"uuid": "57211dc8-7aea-45c6-8a90-702094e7c759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://t.me/true_secator/8492", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043f\u0440\u0438\u043d\u044f\u043b\u043e\u0441\u044c \u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Progress Kemp LoadMaster.\n\nKemp LoadMaster - \u044d\u0442\u043e \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (ADC) \u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f, Amazon, \u0412\u0412\u0421 \u0421\u0428\u0410) \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u0435\u0436\u0434\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\nProgress Software \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e 80% \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Fortune 500 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u0430 Kemp LoadMaster \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0430 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 100 000 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a\u00a0CVE-2026-8037, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 LoadMaster, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 API \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\n\nProgress Software \u0432 \u0438\u044e\u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Kemp LoadMaster (GA v7.2.63.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0438 LTSF v7.2.54.17 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442\u00a0\u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 MOVEit WAF (Web Application Firewall) \u0434\u043e GA v7.2.63.2\u00a0.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver, \u043e\u043a\u043e\u043b\u043e 300 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Kemp LoadMaster \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0441\u0435\u0442\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0442\u043e\u043c, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430\u043c\u0438 \u0438\u043b\u0438 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u0430\u0442\u0430\u043a CVE-2026-8037. \u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 CISA\u00a0\u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0435\u0435\u00a0\u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Progress \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u043e\u0441\u043b\u0430\u043b\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c ShareFile, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0437\u043e\u043d \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0441 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u0442\u043e\u0433\u0434\u0430 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043a\u0430\u043a \u00ab\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u0443\u044e \u0432\u043d\u0435\u0448\u043d\u044e\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00bb, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u044d\u0442\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438.\n\n\u041f\u043e\u0437\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 0-day, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0443\u0442\u0438 \u0432 ShareFile, \u043e\u0442\u043c\u0435\u0447\u0430\u044f, \u0447\u0442\u043e \u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u00ab\u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0430\u043a\u0438\u043c-\u043b\u0438\u0431\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043d\u0435 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u0443\u044f \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b.", "creation_timestamp": "2026-08-13T01:00:03.904663Z"}, {"uuid": "e3c38123-22c8-4144-a32f-c628c39e2918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mspugkdntx2o", "content": "\ud83e\udd16 CVE-2026-8037: command injection in Progress Kemp LoadMaster, actively exploited. Unauthenticated RCE via unsanitized API inputs. Patches in June \u2014 apply. CISA KEV added.\nhttps://www.bleepingcomputer.com/news/security/cisa-warns-of-critical-progress-loadmaster-flaw-exploited-in-attacks/", "creation_timestamp": "2026-08-10T10:12:56.339235Z"}, {"uuid": "d50fb920-f14a-474c-a48b-940fb32a6256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mspxnqrcl425", "content": "\ud83d\udea8 CISA says patch it. Attackers already did.\n\nCVE-2026-8037 is in KEV.\nProgress Kemp LoadMaster.\n\nhttps://www.yazoul.net/news/article/progress-kemp-loadmaster-flaw-hits-cisa-kev-after-792-reported-exploit-attempts/\n\nby Yazoul AI #InfoSec #DataBreach", "creation_timestamp": "2026-08-10T11:10:38.720873Z"}, {"uuid": "4fc08542-f859-473a-b18f-19c8e8666c12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3mspyqdogxp2c", "content": "CISA pide parche urgente por fallo cr\u00edtico en Progress LoadMaster\n\nLa CISA urgi\u00f3 parchar una falla cr\u00edtica (CVE-2026-8037, CVSS 9.6) en Progress Kemp\u2026\n\nhttps://mentehackers.com/cisa-parche-loadmaster-cve-2026-8037-0e88f54c\n#Ciberseguridad #Tecnologia #MenteHackers", "creation_timestamp": "2026-08-10T11:29:59.998976Z"}, {"uuid": "dd770a8a-23b8-4b47-bfe3-85a4dfaccdae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msq44ej7gz2c", "content": "CISA says CVE-2026-8037 is actively exploited in Progress Kemp LoadMaster and MOVEit WAF. The command injection flaw can let unauthenticated attackers run arbitrary commands on exposed appliances. #LoadMaster #MOVEitWAF #CISA", "creation_timestamp": "2026-08-10T12:30:24.597745Z"}, {"uuid": "8ba5e336-b5c7-4edc-ad95-42fddb6d2b8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3msq4hsnxrx22", "content": "CISA\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305fProgress LoadMaster\u306e\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u3092\u8b66\u544a\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81(CISA)\u306f\u3001Progress LoadMaster\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u306a\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027(CVE-2026-8037)\u306b\u3064\u3044\u3066\u3001\u5b9f\u969b\u306e\u60aa\u7528\u306e\u8a3c\u62e0\u3092\u78ba\u8a8d\u3057\u305f\u3068\u3057\u3066\u3001\u65e2\u77e5\u306e\u60aa\u7528\u6e08\u307f\u8106\u5f31\u6027(KEV)\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002Hacking&amp; Cracking...", "creation_timestamp": "2026-08-10T12:36:48.318619Z"}, {"uuid": "a80954d3-2cfd-4a52-8bb0-37fa6bf9218a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3msqbnuvaj72m", "content": "\ud83d\udea8 CRITICAL THREAT ALERT: CVE-2026-8037 is under active exploitation per CISA KEV. Progress LoadMaster appliances face remote command injection risks. Secure your perimeter with our strategic C-Suite breakdown covering technical indicators, backdoor mechanics, and hardening\u2026", "creation_timestamp": "2026-08-10T14:09:40.858322Z"}, {"uuid": "2fed715a-a482-4c90-850c-357ccc87cb16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdn7vws42k", "content": "1/ \u26a0\ufe0f CISA gave federal agencies until TODAY to patch Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). Unauthenticated RCE, 792 exploit attempts already logged. Patch it now if you run this gear.", "creation_timestamp": "2026-08-10T14:45:07.045927Z"}, {"uuid": "c2f76d20-d0ee-47ad-ae5b-25206bd66e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdn7wakn2k", "content": "1/ \u26a0\ufe0f CISA gave federal agencies until TODAY to patch Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). Unauthenticated RCE, 792 exploit attempts already logged. Patch it now if you run this gear.", "creation_timestamp": "2026-08-10T14:45:08.957820Z"}, {"uuid": "3a2f597e-f997-4c38-b817-dc983faec954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdn7w6m42k", "content": "1/ \u26a0\ufe0f CISA gave federal agencies until TODAY to patch Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). Unauthenticated RCE, 792 exploit attempts already logged. Patch it now if you run this gear.", "creation_timestamp": "2026-08-10T14:45:07.534675Z"}, {"uuid": "e7434218-3883-4e95-bce2-a2b66fad0daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdn7w7le2k", "content": "1/ \u26a0\ufe0f CISA gave federal agencies until TODAY to patch Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). Unauthenticated RCE, 792 exploit attempts already logged. Patch it now if you run this gear.", "creation_timestamp": "2026-08-10T14:45:08.010603Z"}, {"uuid": "956cce66-dc8b-48dc-8599-46c71af1b174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdn7w7lf2k", "content": "1/ \u26a0\ufe0f CISA gave federal agencies until TODAY to patch Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). Unauthenticated RCE, 792 exploit attempts already logged. Patch it now if you run this gear.", "creation_timestamp": "2026-08-10T14:45:08.486585Z"}, {"uuid": "07859dbd-5e6d-4293-91b1-1aa34e8e836f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdn7wbjw2k", "content": "1/ \u26a0\ufe0f CISA gave federal agencies until TODAY to patch Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). Unauthenticated RCE, 792 exploit attempts already logged. Patch it now if you run this gear.", "creation_timestamp": "2026-08-10T14:45:09.893361Z"}, {"uuid": "c0ae634d-3b0b-4503-905e-c05d4906ff22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdn7wbjv2k", "content": "1/ \u26a0\ufe0f CISA gave federal agencies until TODAY to patch Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). Unauthenticated RCE, 792 exploit attempts already logged. Patch it now if you run this gear.", "creation_timestamp": "2026-08-10T14:45:09.427804Z"}, {"uuid": "132d18e3-88e9-4e0e-879f-03b59f248905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdn7wcj62k", "content": "1/ \u26a0\ufe0f CISA gave federal agencies until TODAY to patch Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). Unauthenticated RCE, 792 exploit attempts already logged. Patch it now if you run this gear.", "creation_timestamp": "2026-08-10T14:45:10.358081Z"}, {"uuid": "aa946b98-d5e5-4013-914b-7528836ab037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdn7wdig2k", "content": "1/ \u26a0\ufe0f CISA gave federal agencies until TODAY to patch Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). Unauthenticated RCE, 792 exploit attempts already logged. Patch it now if you run this gear.", "creation_timestamp": "2026-08-10T14:45:10.819362Z"}, {"uuid": "7a9349c1-0e21-4225-9373-dfe39dc4173f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdtbfwdw2k", "content": "1/ \u26a0\ufe0f La CISA le dio a las agencias federales hasta HOY para parchear Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). RCE sin autenticaci\u00f3n, 792 intentos de ataque ya registrados. Parchea ya.", "creation_timestamp": "2026-08-10T14:48:30.203628Z"}, {"uuid": "912ba26e-bdc6-46bd-9a48-a694dee901bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdtbg47g2k", "content": "1/ \u26a0\ufe0f La CISA le dio a las agencias federales hasta HOY para parchear Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). RCE sin autenticaci\u00f3n, 792 intentos de ataque ya registrados. Parchea ya.", "creation_timestamp": "2026-08-10T14:48:30.680956Z"}, {"uuid": "ace35ea9-600c-4295-a176-d24aa9a5392f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdtbg47h2k", "content": "1/ \u26a0\ufe0f La CISA le dio a las agencias federales hasta HOY para parchear Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). RCE sin autenticaci\u00f3n, 792 intentos de ataque ya registrados. Parchea ya.", "creation_timestamp": "2026-08-10T14:48:31.148681Z"}, {"uuid": "2cc2233b-1c18-471c-8e8d-f713703761cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdtbg56p2k", "content": "1/ \u26a0\ufe0f La CISA le dio a las agencias federales hasta HOY para parchear Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). RCE sin autenticaci\u00f3n, 792 intentos de ataque ya registrados. Parchea ya.", "creation_timestamp": "2026-08-10T14:48:31.607182Z"}, {"uuid": "c27abb02-7a81-4631-a679-a2eb5a2edf1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdtbg65y2k", "content": "1/ \u26a0\ufe0f La CISA le dio a las agencias federales hasta HOY para parchear Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). RCE sin autenticaci\u00f3n, 792 intentos de ataque ya registrados. Parchea ya.", "creation_timestamp": "2026-08-10T14:48:32.539667Z"}, {"uuid": "dc045319-9d4b-41ff-aba5-cd24c4458a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdtbg65x2k", "content": "1/ \u26a0\ufe0f La CISA le dio a las agencias federales hasta HOY para parchear Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). RCE sin autenticaci\u00f3n, 792 intentos de ataque ya registrados. Parchea ya.", "creation_timestamp": "2026-08-10T14:48:32.068332Z"}, {"uuid": "ce11a0c3-c257-408d-a473-7f0ff9a01550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdtbg75a2k", "content": "1/ \u26a0\ufe0f La CISA le dio a las agencias federales hasta HOY para parchear Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). RCE sin autenticaci\u00f3n, 792 intentos de ataque ya registrados. Parchea ya.", "creation_timestamp": "2026-08-10T14:48:33.019539Z"}, {"uuid": "c8d14dae-ff2f-4991-9153-5890ab8e561f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdtbg75b2k", "content": "1/ \u26a0\ufe0f La CISA le dio a las agencias federales hasta HOY para parchear Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). RCE sin autenticaci\u00f3n, 792 intentos de ataque ya registrados. Parchea ya.", "creation_timestamp": "2026-08-10T14:48:33.509071Z"}, {"uuid": "214adbd4-2a0c-4e95-9108-8ca311d1c3c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msqdtbga4j2k", "content": "1/ \u26a0\ufe0f La CISA le dio a las agencias federales hasta HOY para parchear Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6). RCE sin autenticaci\u00f3n, 792 intentos de ataque ya registrados. Parchea ya.", "creation_timestamp": "2026-08-10T14:48:33.963965Z"}, {"uuid": "df2e87c9-fd72-4937-a4d8-cdfde9007c9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3msqg2iya3x2n", "content": "CISA warns of active exploitation of CVE-2026-8037 in Progress LoadMaster. Immediate action required to secure systems. #CyberSecurity #ProgressLoadMaster #CVE20268037 #NetworkSecurity #CISA thedailytechfeed.com/critical-pro...", "creation_timestamp": "2026-08-10T15:28:20.109967Z"}, {"uuid": "4ab3ccb2-a1bb-4f37-ae40-3e60abc5f5c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mph7ur5kcr2o", "content": "Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) - watchTowr Labs", "creation_timestamp": "2026-06-29T19:28:11.689351Z"}, {"uuid": "3a6bd2f8-1689-443d-8bb5-a7d58c80e374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mphahhx22y2v", "content": "We're back, analyzing CVE-2026-8037, a pre-auth RCE in Progress' Kemp LoadMaster appliance.\n\n\nhttps://\nlabs.watchtowr.com/enterprise-tec\nh-in-shell-out-progress-kemp-loadmaster-uninitialized-heap-to-pre-auth-rce-cve-\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2071676690791559564)", "creation_timestamp": "2026-06-29T19:38:39.557576Z"}, {"uuid": "d17ddc11-547b-4cb7-a512-3de376fd518d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mphbduuznn26", "content": "Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) - watchTowr Labs", "creation_timestamp": "2026-06-29T19:54:32.699081Z"}, {"uuid": "54518a33-e7ee-4f17-ac54-f407a81aaafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mphbdvfyyd2q", "content": "Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) - watchTowr Labs", "creation_timestamp": "2026-06-29T19:54:33.212869Z"}, {"uuid": "e92bbb8b-d9fc-4e74-9ae8-d46f0c3cd078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msqkw2vx7g2i", "content": "792 attempts.\n\nThat's how many times attackers tried to exploit CVE-2026-8037 before CISA even added it to KEV.\n\nhttps://www.yazoul.net/malware/formbook-2026-08/reports/2026-08-09/\n\nby Yazoul AI #CyberSecurity #Security", "creation_timestamp": "2026-08-10T16:55:21.119688Z"}, {"uuid": "3427ed43-b6c6-4606-a401-d7d1de1c5702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://t.me/pphm_HackerNews/2545", "content": "\ud83d\udd34 CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability\n\nThe US cybersecurity agency CISA has urged federal agencies to immediately patch a critical-severity vulnerability in Progress Kemp LoadMaster that has been exploited in the wild.\n\nTracked as CVE-2026-8037 (CVSS score of 9.6), the flaw is described as an OS command injection that could be exploited without authentication for remote code execution (RCE).\n\nAccording to Progress\u2019 advisory, a remote attacker could exploit the bug through unsanitized API inputs to execute arbitrary commands on the LoadMaster appliance.\n\nDisclosed on June 4 alongside CVE-2026-33691, the security defect also affects ECS Connection Manager, Connection Manager for ObjectScale, and MOVEit WAF.", "creation_timestamp": "2026-08-22T00:00:10.329802Z"}, {"uuid": "ea44b5d0-70b9-499f-a67e-98209085f210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://thehackernews.com/2026/06/progress-kemp-loadmaster-flaw-could-let.html", "content": "A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API.\n\nThe flaw, tracked as&nbsp;CVE-2026-8037, carries a CVSS score of&nbsp;9.8 according to ZDI. A patch is available. If you run LoadMaster with the API enabled, update now.\n\nProgress&nbsp;published its advisory on June", "creation_timestamp": "2026-06-30T10:00:53.274274Z"}, {"uuid": "d6d23fc1-d969-4b13-8d53-ac26ad382d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpis7q656z2b", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8037 \u0432 Progress Kemp LoadMaster: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/991C109A-D7C3-4285-9EE1-62009B337AAC", "creation_timestamp": "2026-06-30T10:29:06.605684Z"}, {"uuid": "45684dc2-5c7e-4498-836a-008f34b7c76e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpitr5qcwf2l", "content": "\ud83e\udd16 CVE-2026-8037 (CVSS 9.8): Pre-auth RCE as root in Progress Kemp LoadMaster via a crafted API request. Patch available.\nhttps://thehackernews.com/2026/06/progress-kemp-loadmaster-flaw-could-let.html", "creation_timestamp": "2026-06-30T10:56:45.015341Z"}, {"uuid": "a79ce133-ca54-40a1-88ef-3f7bbe56a68a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116838713560265479", "content": "Las \u00faltimas 24 horas en seguridad inform\u00e1tica revelan t\u00e9cnicas avanzadas de evasi\u00f3n EDR con modelos de lenguaje grande y manipulaciones sist\u00e9micas como HookChain y Lacuna Chain, junto a alertas por extensiones maliciosas en Chrome y una grave vulnerabilidad en Progress Kemp LoadMaster que permite ejecuci\u00f3n remota sin autenticaci\u00f3n. Descubre estos y m\u00e1s detalles en el siguiente listado de noticias sobre seguridad inform\u00e1tica:\n\ud83d\uddde\ufe0f \u00daLTIMAS NOTICIAS EN SEGURIDAD INFORM\u00c1TICA \ud83d\udd12====| \ud83d\udd25 LO QUE DEBES SABER HOY \ufeff\ufeff30/06/26\ufeff\ufeff  \ud83d\udcc6 |==== \n\ud83d\udd0d ACELERACI\u00d3N DE LA EVASI\u00d3N EDR CON AN\u00c1LISIS IMPULSADO POR LLM\nSpecterOps ha utilizado modelos de lenguaje grande (LLMs) para analizar Cortex XDR, extrayendo reglas YARA, modelos de machine learning y detecciones de comportamiento con mayor rapidez y precisi\u00f3n. Esta t\u00e9cnica abre nuevas v\u00edas para comprender y fortalecer las defensas EDR frente a amenazas avanzadas. Profundiza en c\u00f3mo los LLMs est\u00e1n transformando la seguridad endpoint \ud83d\udc49 https://djar.co/rlDDng\n\u26a0\ufe0f EXTENSI\u00d3N MALICIOSA DE PERPLEXITY PARA CHROME INTERCEPTA B\u00daSQUEDAS Y ENTRADAS EN LA BARRA DE DIRECCIONES\nMicrosoft ha detectado una extensi\u00f3n falsa de Perplexity para Chrome que intercepta la informaci\u00f3n ingresada por el usuario, incluidos t\u00e9rminos de b\u00fasqueda, direcciones IP y encabezados, antes de redirigir a sitios maliciosos. Esta amenaza pone en riesgo la privacidad y seguridad de los navegadores, por lo que es crucial verificar la autenticidad de las extensiones instaladas. Descubre c\u00f3mo protegerte frente a esta amenaza \ud83d\udc49 https://djar.co/KRJDD\n\ud83d\udee1\ufe0f HOOKCHAIN: AN\u00c1LISIS PROFUNDO DE T\u00c9CNICAS AVANZADAS PARA EVADIR EDR\nHookChain representa una sofisticada t\u00e9cnica para evadir soluciones EDR mediante el uso de API de Windows y la manipulaci\u00f3n directa de llamadas al sistema. Este m\u00e9todo permite que el malware se oculte eficazmente evitando la detecci\u00f3n y respuesta de seguridad habitual. Entiende los detalles t\u00e9cnicos y casos reales para anticiparte a esta evasi\u00f3n \ud83d\udc49 https://djar.co/PfjW\n\ud83d\udc7b LACUNA CHAIN: FRAMES FANTASMAS PARA VENCER TODAS LAS CAPAS DE DETECCI\u00d3N EDR BASADAS EN PILA DE LLAMADAS\nComo evoluci\u00f3n de HookChain, Lacuna Chain implementa manipulaci\u00f3n avanzada del sistema para derrotar todas las capas de detecci\u00f3n que analizan la pila de llamadas en EDR. Esta t\u00e9cnica demuestra c\u00f3mo los atacantes pueden esquivar controles profundos, exigiendo defensas m\u00e1s robustas y adaptativas. Conoce c\u00f3mo funciona esta nueva amenaza y c\u00f3mo prepararte \ud83d\udc49 https://djar.co/1eteTF\n\ud83c\udfaf GARLASCO: \u201cLOS SUPER SOFTWARES ISRAEL\u00cdES PUEDEN AYUDAR A BUSCAR LA VERDAD\u201d EN INVESTIGACIONES DE CIBERSEGURIDAD\nMatteo Adjimi, CEO de Argo Spa, destaca las complejidades que enfrentan las investigaciones en ciberseguridad tras a\u00f1os de evoluci\u00f3n tecnol\u00f3gica y c\u00f3mo el software avanzado israel\u00ed puede aportar claridad y eficacia en la b\u00fasqueda de evidencias digitales. Una visi\u00f3n clave para quienes valoran la innovaci\u00f3n en seguridad y an\u00e1lisis forense digital. Lee la entrevista completa y sus perspectivas \ud83d\udc49 https://djar.co/bTu8\n\ud83d\udea8 CVE-2026-8037 EN PROGRESS KEMP LOADMASTER PERMITE EJECUCI\u00d3N DE COMANDOS RA\u00cdZ SIN AUTENTICACI\u00d3N\nSe ha identificado una grave vulnerabilidad en Progress Kemp LoadMaster que permite la ejecuci\u00f3n de comandos ra\u00edz previos a autenticaci\u00f3n mediante la API, exponiendo sistemas cr\u00edticos. Ya existen parches oficiales y una prueba de concepto p\u00fablica para evaluar la amenaza. Es urgente aplicar las actualizaciones recomendadas para evitar compromisos. Consulta los detalles t\u00e9cnicos y las mitigaciones \ud83d\udc49 https://djar.co/BNnf", "creation_timestamp": "2026-06-30T11:01:33.732913Z"}, {"uuid": "cd398dd5-74d4-414d-8b6c-a290a9d28b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116840119613978714", "content": "WatchTower posted this yesterday, if you missed it:\nEnterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) https://labs.watchtowr.com/enterprise-tech-in-shell-out-progress-kemp-loadmaster-uninitialized-heap-to-pre-auth-rce-cve-2026-8037/ #infosec #vulnerability #threatresearch", "creation_timestamp": "2026-06-30T16:58:59.942469Z"}, {"uuid": "eaa9afdd-45dd-43d6-abd2-513da84c2ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/warthogtk.bsky.social/post/3mpjrwif6zg2v", "content": "Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) labs.watchtowr.com/enterprise-t...", "creation_timestamp": "2026-06-30T19:56:36.539550Z"}, {"uuid": "56cc9b7a-33ab-4074-95f2-8d6644bea192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpjs5ehhic2p", "content": "\u300cProgress Kemp LoadMaster\u300d\u306bRCE\u8106\u5f31\u6027 - WAF\u56de\u907f\u306e\u304a\u305d\u308c\u3082\n\n\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30c7\u30ea\u30d0\u30ea\u30fc\u88fd\u54c1\u300cProgress Kemp LoadMaster\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\nProgress Software\u306f\u73fe\u5730\u6642\u95936\u67084\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30012\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-8037\u300d\u300cCVE-2026-33691\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u300cProgress Kemp LoadMaster\u300d\u300c\u540cLTSF\u300d\u306b\u304f\u308f\u3048\u3066\u3001\u300cProgress ECS Connection Manager\u300d\u300cProgress Connection Manag...", "creation_timestamp": "2026-06-30T20:00:27.303685Z"}, {"uuid": "790ae1f7-df75-48d9-b9fa-77c0b5953fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mpk2m46adm2b", "content": "Critical Progress Kemp LoadMaster Vulnerability Enables Pre-Auth Remote Code Execution \u2013 Patch Now Before Attackers Do +\u00a0Video\n\nIntroduction: A newly disclosed critical vulnerability in Progress Kemp LoadMaster, tracked as CVE-2026-8037, allows unauthenticated remote attackers to execute arbitrary\u2026", "creation_timestamp": "2026-06-30T22:31:52.081196Z"}, {"uuid": "930d4b33-61ab-47d6-8cb6-d090f7680b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://thehackernews.com/2026/06/progress-kemp-loadmaster-flaw-could-let.html", "content": "A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API.\n\nThe flaw, tracked as&nbsp;CVE-2026-8037, carries a CVSS score of&nbsp;9.8 according to ZDI. A patch is available. If you run LoadMaster with the API enabled, update now.\n\nProgress&nbsp;published its advisory on June", "creation_timestamp": "2026-07-01T01:00:44.925753Z"}, {"uuid": "dbf94124-fd70-4ccf-901b-4f604529d817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3msqsjalsnr2g", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical-severity flaw in Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6) to its Known Exploited Vulnerabilities catalog due to 792 reported exploit attempts.", "creation_timestamp": "2026-08-10T19:11:19.992961Z"}, {"uuid": "573b974c-d3db-4b68-83dc-75f7d58fa65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mplcqvsgzv2k", "content": "\ud83d\udce2 CVE-2026-8037 : RCE pr\u00e9-authentifi\u00e9e dans Progress Kemp LoadMaster via heap non initialis\u00e9\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nLe 29 juin 2026, watchTowr Labs\u2026\nhttps://cyberveille.ch/posts/2026-07-01-cve-2026-8037-rce-pre-authentifiee-dans-progress-kemp-loadmaster-via-heap-non-initialise/ #CVE_2026_8037 #Cyberveille", "creation_timestamp": "2026-07-01T10:30:22.191083Z"}, {"uuid": "0e2161d0-6a67-4c63-ad33-0a823ae3f9be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpli5vmihs2k", "content": "\ud83d\udccc Critical Vulnerability in Progress Kemp LoadMaster Leads to Pre-Auth RCE (CVE-2026-8037) https://www.cyberhub.blog/article/28019-critical-vulnerability-in-progress-kemp-loadmaster-leads-to-pre-auth-rce-cve-2026-8037", "creation_timestamp": "2026-07-01T12:07:08.565590Z"}, {"uuid": "437258e6-6e75-457b-ac88-5ee3b46a3ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mplqcvkhho2v", "content": "Progress Kemp LoadMaster CVE-2026-8037 enables unauthenticated OS command injection leading to arbitrary code execution, with active exploitation attempts observed since June 29, 2026.\n", "creation_timestamp": "2026-07-01T14:33:05.085368Z"}, {"uuid": "72267b80-59c7-48d5-a729-c0e5c4fb044a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d2df5079-2286-4d5c-a131-546b27ea662c", "content": "", "creation_timestamp": "2026-07-01T15:00:40.047514Z"}, {"uuid": "58b11587-3fae-4b1e-95ed-c617f1d13cec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116845355489477559", "content": "eSentire, from yesterday: Progress Kemp LoadMaster Vulnerability Targeted (CVE-2026-8037) https://www.esentire.com/security-advisories/progress-kemp-loadmaster-vulnerability-targeted-cve-2026-8037 #infosec #vulnerability", "creation_timestamp": "2026-07-01T15:10:32.785679Z"}, {"uuid": "f5a0481b-6ea3-4df1-a869-3f6b09cb4be9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpltvbcvuw2x", "content": "\ud83e\udd16 CVE-2026-8037 (CVSS 9.6): Pre-auth RCE in Progress Kemp LoadMaster via OS command injection. Active exploitation attempts detected. Patch available.\nhttps://thehackernews.com/2026/07/latest-progress-kemp-loadmaster-pre.html", "creation_timestamp": "2026-07-01T15:37:04.111701Z"}, {"uuid": "20a34331-408e-4eef-8ab7-e9bcd86b83e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mpluecjfdh2d", "content": "Active exploitation attempts target CVE-2026-8037 in Progress Kemp LoadMaster, a critical pre-auth command injection flaw that could enable unauthenticated remote code execution. #ProgressKempLoadMaster #CVE20268037 #eSentire", "creation_timestamp": "2026-07-01T15:45:27.104233Z"}, {"uuid": "a48fb16d-0e39-48bc-bcd8-6d7cfc1a1b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplukubw4724", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-8037: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c Progress Kemp LoadMaster \u043e\u0442 \u0430\u0442\u0430\u043a\n\n\n\nhttps://kripta.biz/posts/36A898CC-E7BF-453D-9E99-54504457A962", "creation_timestamp": "2026-07-01T15:49:06.826251Z"}, {"uuid": "7c42bfb3-1537-414f-9984-b4fb8181d536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mplukubfki2t", "content": "\u8fdb\u5c55 Kemp LoadMaster \u5b58\u5728\u4e25\u91cd\u6f0f\u6d1e CVE-2026-8037:\u653b\u51fb\u8005\u6b63\u5728\u79ef\u6781\u5229\u7528,\u4f01\u4e1a\u5982\u4f55\u5e94\u5bf9?\n\n\n\nhttps://qian.cx/posts/D44F3346-3C0D-4E9F-9760-CA83BFE6CF4D", "creation_timestamp": "2026-07-01T15:49:07.348822Z"}, {"uuid": "6d450ee5-0e31-42ce-aab4-e2bfa2a45fbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://thehackernews.com/2026/07/latest-progress-kemp-loadmaster-pre.html", "content": "A recently disclosed critical security flaw impacting Progress\u202fKemp LoadMaster is seeing active exploitation attempts, according to an advisory from eSentire's Threat Response Unit (TRU).\n\nThe Canadian cybersecurity company said it identified exploitation attempts targeting CVE-2026-8037 (CVSS score: 9.6), an operating system (OS) command injection flaw that could be exploited to achieve", "creation_timestamp": "2026-07-01T16:00:57.881348Z"}, {"uuid": "4a729e70-d872-45b3-8865-914d8e8b10ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mpmctbzgpk2f", "content": "Kemp LoadMaster pre-auth RCE under active exploitation. CVE-2026-8037 gives attackers full control with no login. Patch now.\n#ThreatIntel #ICS\nhttps://threat-intelligence.redeyesecurity.com/blog/kemp-loadmaster-cve-2026-8037-active-exploitation-2026", "creation_timestamp": "2026-07-01T20:04:22.354433Z"}, {"uuid": "c80885ca-1d9b-459c-82a8-0e9d2d7450bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-8037.yaml", "content": "", "creation_timestamp": "2026-07-01T21:00:03.751783Z"}, {"uuid": "49eea859-89ab-4640-b5c4-4bdc64d3b462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-8037.yaml", "content": "", "creation_timestamp": "2026-07-02T00:00:04.308744Z"}, {"uuid": "84ee7e36-3eac-4560-8425-7f8213b251ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://thehackernews.com/2026/07/latest-progress-kemp-loadmaster-pre.html", "content": "A recently disclosed critical security flaw impacting Progress\u202fKemp LoadMaster is seeing active exploitation attempts, according to an advisory from eSentire's Threat Response Unit (TRU).\n\nThe Canadian cybersecurity company said it identified exploitation attempts targeting CVE-2026-8037 (CVSS score: 9.6), an operating system (OS) command injection flaw that could be exploited to achieve", "creation_timestamp": "2026-07-02T01:00:41.968139Z"}, {"uuid": "64c7c070-e15d-4ec1-8fbb-71f3ae3c9f48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mpmtfsscvoo2", "content": "CVE-2026-8037: Critical RCE Vulnerability in Progress Kemp LoadMaster Requires Immediate Patching Introduction: Unveiling the Critical Vulnerability The recently identified CVE-2026-8037 vulnerabil...\n\n#rce #heap #preauthentication #cybersecurity\n\nOrigin | Interest | Match", "creation_timestamp": "2026-07-02T01:01:04.162441Z"}, {"uuid": "8de0afe4-7d85-4ad1-ba13-5cad80870939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mss2pqlihz2p", "content": "Every internet-exposed Progress Kemp LoadMaster $PRGS load balancer left unpatched is a live target. CISA added CVE-2026-8037 (CVSS 9.6) to its Known Exploited Vulnerabilities catalog on August 7. KEVIntel logged 792 exploit attempts from 65 IPs in 41 days, per The Hacker News.", "creation_timestamp": "2026-08-11T07:10:46.219895Z"}, {"uuid": "c680f1b9-5a83-42df-b429-4893f8435d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mtlwpc5sif2k", "content": "CISA Adds CVE-2026-8037 to KEV: 792 Exploit Attempts from 65 IPs in 41 Days", "creation_timestamp": "2026-08-21T14:08:09.765143Z"}, {"uuid": "570773c1-c045-4925-b0d1-2bc1c3601f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/117076203798799032", "content": "Nutzt wer den Kemp LoadMaster und hat diesen nicht gepatcht?\nhttps://borncity.com/blog/2026/08/08/kemp-loadmaster-wird-ueber-cve-2026-8037-angegriffen/", "creation_timestamp": "2026-08-11T09:38:18.492499Z"}, {"uuid": "f6de9f33-3ece-4496-bf85-e6b48bdef6d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeelzuy422", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:17.133490Z"}, {"uuid": "d582fe74-9dbf-4986-a62c-14776dc8b7df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeem23su22", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:20.718163Z"}, {"uuid": "b5b53c3f-82d5-48d9-b725-e5b876ec4241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeem24s422", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:22.027894Z"}, {"uuid": "60573f97-432e-4916-9b44-ebf9d14b7508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeem26qm22", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:23.739402Z"}, {"uuid": "40e1ef68-6f28-4a48-9210-54d322878fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeem2dmu22", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:27.167421Z"}, {"uuid": "7b911e7f-3344-418c-b448-d4752a18b702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeem25re22", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:22.851609Z"}, {"uuid": "f7b48563-7af7-4271-88d2-33b2ddc6870c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeem2cnm22", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:26.319449Z"}, {"uuid": "bf068dcb-e1d0-495f-84f7-70afd6c16d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeem27pu22", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:24.597495Z"}, {"uuid": "0d0987e7-0bb0-4f4a-998f-33a1640353d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mpoeem2ap422", "content": "4/ \u26a0\ufe0f Kemp LoadMaster CVE-2026-8037 (CVSS 9.6): pre-auth root command execution in a load balancer sitting at your network's front door. Under active attack since June 29.", "creation_timestamp": "2026-07-02T15:37:25.483670Z"}, {"uuid": "b2978e55-2a71-47e1-bd16-406fbaed2b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mpohx4nyjm26", "content": "Critical flaw in Progress Kemp LoadMaster (CVE-2026-8037) under active attack. Update now. #CyberSecurity #KempLoadMaster #CVE20268037 #NetworkSecurity #PatchNow #InfoSec thedailytechfeed.com/critical-vul...", "creation_timestamp": "2026-07-02T16:41:19.398781Z"}, {"uuid": "9a0325fe-7e54-473f-9e88-86fdd28c831a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-8037.yaml", "content": "", "creation_timestamp": "2026-07-03T00:00:03.485524Z"}, {"uuid": "78c167ba-f674-4e80-bede-53471db7791e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mpqv26uqz52x", "content": "\ud83d\udd34 EXPLOITED\n\nProgress Kemp LoadMaster has an unauthenticated flaw (CVE-2026-8037) that runs commands as root through its management API.\n\nIt is now being exploited, and a public exploit is out.\n\nFix: update to GA 7.2.63.2 or LTSF 7.2.54.18, and take the API off the internet.", "creation_timestamp": "2026-07-03T15:41:00.272797Z"}, {"uuid": "b3131cf7-be98-4065-8c7e-69925bd20637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://infosec.exchange/ap/users/116769913619325742/statuses/116856800011935767", "content": "\ud83d\udd34 EXPLOITED\nProgress Kemp LoadMaster has an unauthenticated flaw (CVE-2026-8037) that runs commands as root through its management API.\nIt is now being exploited, and a public exploit is out.\nFix: update to GA 7.2.63.2 or LTSF 7.2.54.18, and take the API off the internet.\nhttps://suriq.io/blog/kemp-loadmaster-cve-2026-8037-exploited\n#CVE #Phishing #infosec #cybersecurity", "creation_timestamp": "2026-07-03T15:41:14.543263Z"}, {"uuid": "eb88d08c-3b7b-4a0d-b137-556b2fddb3ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3mprvedjhj32c", "content": "Falla cr\u00edtica en Kemp LoadMaster: root sin clave.\n\nCVE-2026-8037 (severidad 9,8) deja a un atacante sin autenticar ejecutar comandos como root en el balanceador Kemp LoadMaster con una petici\u00f3n armada a su API. Ya hay parche.\n\nLeer en Progress\n\n#LaSe\u00f1alNews #Ciberseguridad #CyberSecurity", "creation_timestamp": "2026-07-04T01:19:20.180152Z"}, {"uuid": "b29b76e9-1285-49df-a870-29449f6ea60f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mps6iw3eyi2d", "content": "CVE-2026-8037: Unauthenticated RCE in Progress Kemp LoadMaster \u2013 Patch Now or Get Pwned +\u00a0Video\n\nIntroduction A critical security flaw in Progress Kemp LoadMaster, tracked as CVE-2026-8037, is currently being actively exploited in the wild. This vulnerability allows unauthenticated attackers to\u2026", "creation_timestamp": "2026-07-04T04:02:58.023816Z"}, {"uuid": "9813eed6-8b6f-453f-867f-11caa07959b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "exploited", "source": "Telegram/aLHVKOMJOSjXg_4cM8uFKqRDI8oBrEYl5ioyasIg5aPv", "content": "", "creation_timestamp": "2026-08-19T23:00:04.849999Z"}, {"uuid": "672ee922-262d-454e-8f38-115399335b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mptamqs6262h", "content": "Every internet-facing Progress $PRGS Kemp LoadMaster is now a target. CVE-2026-8037, a CVSS 9.6 command-injection bug, lets an unauthenticated attacker run root commands on the load balancer. Working exploit code went public June 29, and eSentire is already logging exploitation attempts.", "creation_timestamp": "2026-07-04T14:13:33.547010Z"}, {"uuid": "d2a0ac7d-6837-4ce2-afe0-8b80232e347d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mssiqfdm7z2y", "content": "CISA has lovingly placed CVE-2026-8037 on its catalog because Progress Kemp LoadMaster systems are currently getting hammered by active in-the-wild exploits. This predictable command injection flaw allows any unauthenticated threat actor to joyfully execute arbitrary commands on ...\n\nRead full story", "creation_timestamp": "2026-08-11T11:21:40.470604Z"}, {"uuid": "d3c79881-07c8-45e2-ad34-fb101d5cc4e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "exploited", "source": "Telegram/aLHVKOMJOSjXg_4cM8uFKqRDI8oBrEYl5ioyasIg5aPv", "content": "", "creation_timestamp": "2026-08-20T00:00:07.968286Z"}, {"uuid": "348b3b8f-d074-4f17-98b3-0239766a0caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://t.me/S_E_Reborn/6533", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043f\u0440\u0438\u043d\u044f\u043b\u043e\u0441\u044c \u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Progress Kemp LoadMaster.\n\nKemp LoadMaster - \u044d\u0442\u043e \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (ADC) \u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f, Amazon, \u0412\u0412\u0421 \u0421\u0428\u0410) \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u0435\u0436\u0434\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\nProgress Software \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e 80% \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Fortune 500 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u0430 Kemp LoadMaster \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0430 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 100 000 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a\u00a0CVE-2026-8037, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 LoadMaster, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 API \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\n\nProgress Software \u0432 \u0438\u044e\u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Kemp LoadMaster (GA v7.2.63.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0438 LTSF v7.2.54.17 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442\u00a0\u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 MOVEit WAF (Web Application Firewall) \u0434\u043e GA v7.2.63.2\u00a0.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver, \u043e\u043a\u043e\u043b\u043e 300 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Kemp LoadMaster \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0441\u0435\u0442\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0442\u043e\u043c, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430\u043c\u0438 \u0438\u043b\u0438 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u0430\u0442\u0430\u043a CVE-2026-8037. \u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 CISA\u00a0\u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0435\u0435\u00a0\u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Progress \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u043e\u0441\u043b\u0430\u043b\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c ShareFile, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0437\u043e\u043d \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0441 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u0442\u043e\u0433\u0434\u0430 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043a\u0430\u043a \u00ab\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u0443\u044e \u0432\u043d\u0435\u0448\u043d\u044e\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00bb, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u044d\u0442\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438.\n\n\u041f\u043e\u0437\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 0-day, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0443\u0442\u0438 \u0432 ShareFile, \u043e\u0442\u043c\u0435\u0447\u0430\u044f, \u0447\u0442\u043e \u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u00ab\u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0430\u043a\u0438\u043c-\u043b\u0438\u0431\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043d\u0435 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u0443\u044f \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b.", "creation_timestamp": "2026-08-20T21:00:05.106513Z"}, {"uuid": "5956f589-8393-4924-8281-8abe2031d416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3mssuqfvjti24", "content": "A CISA alerta para um ataque ativo a uma falha cr\u00edtica no Progress Kemp LoadMaster, com piratas inform\u00e1ticos a explorar a vulnerabilidade CVE-2026-8037. A brecha de inje\u00e7\u00e3o de comandos permite a atacantes assumir o controlo total dos equipamentos afetados. \ud83d\udea8\n\n#alerta #ataque #falha ", "creation_timestamp": "2026-08-11T14:56:26.458621Z"}, {"uuid": "8fc37162-8ccf-4c67-894e-80b3c028c096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mpy42jgs772u", "content": "~Checkpoint~\nMultiple ransomware attacks hit financial and defense sectors; critical CVEs in Oracle EBS, Citrix NetScaler, and Kemp LoadMaster are actively exploited.\n-\nIOCs: CVE-2026-46817, CVE-2026-8451, CVE-2026-8037\n-\n...", "creation_timestamp": "2026-07-06T12:35:05.232201Z"}, {"uuid": "e9bfc9df-73f9-4e01-8266-b9f6c215e7af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116873759457623095", "content": "\ud83d\udcf0 Actively Exploited Kemp LoadMaster Flaw (CVE-2026-8037) Allows Pre-Auth RCE as Root\n\ud83d\udea8 ACTIVE EXPLOITATION: A critical pre-auth RCE flaw in Progress Kemp LoadMaster (CVE-2026-8037) allows root access. PoC is public. Patch immediately to protect your network perimeter! #RCE #CVE #Kemp #Progress #CyberSecurity\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/progress-kemp-loadmaster-flaw-cve-2026-8037-actively-exploited-for-rce/?utm_source=mastodon&amp;utm\u2026", "creation_timestamp": "2026-07-06T15:34:03.391059Z"}, {"uuid": "0b7f07bb-5711-47bf-af44-547e3f2c703d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mpyg3p266f2p", "content": "\ud83d\udea8 ACTIVE EXPLOITATION: A critical pre-auth RCE flaw in Progress Kemp LoadMaster (CVE-2026-8037) allows root access. PoC is public. Patch immediately to protect your network perimeter! #RCE #CVE #Kemp #Progress #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-06T15:34:42.292405Z"}, {"uuid": "137b787a-f339-4f28-9d60-92a26f704cf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8037", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/116883699865795430", "content": "Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) https://labs.watchtowr.com/enterprise-tech-in-shell-out-progress-kemp-loadmaster-uninitialized-heap-to-pre-auth-rce-cve-2026-8037/", "creation_timestamp": "2026-07-08T09:42:01.796797Z"}, {"uuid": "bfc47f4e-2e7a-420b-867f-dd81b45440b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mq6hbvadjy2l", "content": "Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037)", "creation_timestamp": "2026-07-09T01:12:03.150218Z"}, {"uuid": "55fc73ac-ad4d-4c80-b6e8-53c34aa1f025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3msy2uci5az2e", "content": "Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) - watchTowr Labs", "creation_timestamp": "2026-08-13T16:29:17.971454Z"}, {"uuid": "6b2a68af-a87d-4c39-899c-665ff8c21fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-09)", "content": "", "creation_timestamp": "2026-07-10T10:15:06.611946Z"}, {"uuid": "3032ca51-b214-4a4d-be77-03f5fe6dc7b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mtgb7iqydw2p", "content": "Progress LoadMaster CVE-2026-8037 (CVSS 9.6): 792 exploit attempts logged, CISA KEV deadline passed. Unauthenticated root command injection. Patch to GA 7.2.63.2 now. \n\n\ud83c\uddec\ud83c\udde7 zurl.co/Ph6GB \n\ud83c\udde9\ud83c\uddea zurl.co/nejNF \n\n#CyberSecurity #CISA #LoadBalancer", "creation_timestamp": "2026-08-19T08:00:13.071780Z"}, {"uuid": "5ae19b03-b879-47d4-9bd3-4437939bb7d2", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a27da8f6-2db3-487b-a9a7-110243974b82", "content": "", "creation_timestamp": "2026-07-11T01:00:13.953990Z"}, {"uuid": "0d20cacd-f997-4b73-b027-12c47afc6f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://t.me/true_secator/8371", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 Microsoft SharePoint Server.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 SharePoint.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2026-45659\u00a0(CVSS 8,8) \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043a\u043e\u043d\u0446\u0435 \u043c\u0430\u044f \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Microsoft, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0449\u0438\u043c \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430 \u0441\u0430\u0439\u0442\u0430, \u0431\u0435\u0437 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\nMicrosoft \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u043d\u0430\u043d\u0438\u0439 \u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0438 \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0443\u0441\u043f\u0435\u0445\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 SharePoint Server Subscription Edition, SharePoint Server 2019, SharePoint Server 2016 \u0438 SharePoint Enterprise Server 2016.\n\nCISA \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0438 \u0434\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u043d\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041f\u043e\u043c\u0438\u043c\u043e CVE-2026-45659 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u044e\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0442 eSentire \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2026-8037\u00a0(CVSS: 9,6) \u0432 Progress Kemp LoadMaster\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c eSentire, CVE-2026-8037\u00a0\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c 29 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 LoadMaster \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, watchTowr Labs \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e escape_quotes() \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0414\u0435\u043b\u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u043b\u0430 \u043e\u0447\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u043e\u043a\u0438 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u043f\u0440\u0438 \u0447\u0442\u0435\u043d\u0438\u0438 \u0432 \u0441\u043e\u0441\u0435\u0434\u043d\u044e\u044e \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u0438 \u043a\u0443\u0447\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u043b\u0430\u0437\u0435\u0439\u043a\u0443 \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /accessv2, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0442 \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u043a\u0443\u0447\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u043d\u0435 \u0438\u043c\u0435\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\neSentire \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u0430\u043a\u043e\u043d\u0447\u0438\u043b\u0438\u0441\u044c \u043d\u0435\u0443\u0434\u0430\u0447\u0435\u0439, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0435 PoC \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0440\u043e\u0441\u0442\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 CVE-2026-8037 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u043c \u0431\u0443\u0434\u0443\u0449\u0435\u043c.\n\n\u041f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u0445\u043e\u0434\u044f\u0442 \u0441\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432: 192.42.116[.]58, 192.42.116[.]105 \u0438 146.70.139[.]154. \u0422\u0430\u043a \u0447\u0442\u043e \u043d\u0430 \u0437\u0430\u043c\u0435\u0442\u043a\u0443.", "creation_timestamp": "2026-07-13T13:00:05.751999Z"}, {"uuid": "5e2a65fa-c802-4250-b9a3-ea62cd5d761e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://t.me/GithubRedTeam/92660", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-8037-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Caster-chen\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 11:51:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u5305\u62ec\u80fd\u6267\u884c\u7684\u547d\u4ee4\u63a2\u6d4b\u548c\u4e00\u952egetshell\uff08\u9700\u8981\u670d\u52a1\u5668\u90e8\u7f72\u670d\u52a1\uff09\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.459912Z"}, {"uuid": "c94d0996-8923-4056-b5d1-cef569d70a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://t.me/GithubRedTeam/92660", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-8037-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Caster-chen\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 11:51:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u5305\u62ec\u80fd\u6267\u884c\u7684\u547d\u4ee4\u63a2\u6d4b\u548c\u4e00\u952egetshell\uff08\u9700\u8981\u670d\u52a1\u5668\u90e8\u7f72\u670d\u52a1\uff09\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:09.882257Z"}, {"uuid": "0c6ca416-40af-464b-9864-ac47a24297a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://t.me/true_secator/8371", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 Microsoft SharePoint Server.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 SharePoint.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2026-45659\u00a0(CVSS 8,8) \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043a\u043e\u043d\u0446\u0435 \u043c\u0430\u044f \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Microsoft, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0449\u0438\u043c \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430 \u0441\u0430\u0439\u0442\u0430, \u0431\u0435\u0437 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\nMicrosoft \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u043d\u0430\u043d\u0438\u0439 \u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0438 \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0443\u0441\u043f\u0435\u0445\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 SharePoint Server Subscription Edition, SharePoint Server 2019, SharePoint Server 2016 \u0438 SharePoint Enterprise Server 2016.\n\nCISA \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0438 \u0434\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u043d\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041f\u043e\u043c\u0438\u043c\u043e CVE-2026-45659 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u044e\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0442 eSentire \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2026-8037\u00a0(CVSS: 9,6) \u0432 Progress Kemp LoadMaster\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c eSentire, CVE-2026-8037\u00a0\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c 29 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 LoadMaster \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, watchTowr Labs \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e escape_quotes() \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0414\u0435\u043b\u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u043b\u0430 \u043e\u0447\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u043e\u043a\u0438 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u043f\u0440\u0438 \u0447\u0442\u0435\u043d\u0438\u0438 \u0432 \u0441\u043e\u0441\u0435\u0434\u043d\u044e\u044e \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u0438 \u043a\u0443\u0447\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u043b\u0430\u0437\u0435\u0439\u043a\u0443 \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 /accessv2, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0442 \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u043a\u0443\u0447\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u043d\u0435 \u0438\u043c\u0435\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\neSentire \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u0430\u043a\u043e\u043d\u0447\u0438\u043b\u0438\u0441\u044c \u043d\u0435\u0443\u0434\u0430\u0447\u0435\u0439, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0435 PoC \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0440\u043e\u0441\u0442\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 CVE-2026-8037 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u043c \u0431\u0443\u0434\u0443\u0449\u0435\u043c.\n\n\u041f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u0445\u043e\u0434\u044f\u0442 \u0441\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432: 192.42.116[.]58, 192.42.116[.]105 \u0438 146.70.139[.]154. \u0422\u0430\u043a \u0447\u0442\u043e \u043d\u0430 \u0437\u0430\u043c\u0435\u0442\u043a\u0443.", "creation_timestamp": "2026-07-14T00:00:47.450548Z"}, {"uuid": "d8eb4c8b-ae27-461d-ae0b-020ab6fcabc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/quasagroup.bsky.social/post/3mtdydv6h6k2r", "content": "LoadMaster \u092a\u0930 CVE-2026-8037 \u0939\u0948? \u0938\u0939\u0940 \u0938\u0941\u0927\u0930\u093e \u0938\u0902\u0938\u094d\u0915\u0930\u0923 \u0932\u0917\u093e\u0915\u0930 \u092b\u093f\u0930 \u092a\u094d\u0930\u092e\u093e\u0923 \u091c\u093e\u0901\u091a\u0947\u0902\nquasa.io/hi/media/loa...\n\u0938\u094d\u0930\u094b\u0924: Quasa Media / \u0932\u0947\u0916\u0915: Slava Vasipenok", "creation_timestamp": "2026-08-18T10:16:18.489772Z"}, {"uuid": "babd62fb-b1aa-4ec9-99d8-74c979a63a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://t.me/S_E_Reborn/6533", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043f\u0440\u0438\u043d\u044f\u043b\u043e\u0441\u044c \u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Progress Kemp LoadMaster.\n\nKemp LoadMaster - \u044d\u0442\u043e \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (ADC) \u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f, Amazon, \u0412\u0412\u0421 \u0421\u0428\u0410) \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u0435\u0436\u0434\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\nProgress Software \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e 80% \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Fortune 500 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u0430 Kemp LoadMaster \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0430 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 100 000 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a\u00a0CVE-2026-8037, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 LoadMaster, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 API \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\n\nProgress Software \u0432 \u0438\u044e\u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Kemp LoadMaster (GA v7.2.63.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0438 LTSF v7.2.54.17 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442\u00a0\u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 MOVEit WAF (Web Application Firewall) \u0434\u043e GA v7.2.63.2\u00a0.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver, \u043e\u043a\u043e\u043b\u043e 300 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Kemp LoadMaster \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0441\u0435\u0442\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0442\u043e\u043c, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430\u043c\u0438 \u0438\u043b\u0438 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u0430\u0442\u0430\u043a CVE-2026-8037. \u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 CISA\u00a0\u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0435\u0435\u00a0\u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Progress \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u043e\u0441\u043b\u0430\u043b\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c ShareFile, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0437\u043e\u043d \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0441 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u0442\u043e\u0433\u0434\u0430 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043a\u0430\u043a \u00ab\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u0443\u044e \u0432\u043d\u0435\u0448\u043d\u044e\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00bb, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u044d\u0442\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438.\n\n\u041f\u043e\u0437\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 0-day, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0443\u0442\u0438 \u0432 ShareFile, \u043e\u0442\u043c\u0435\u0447\u0430\u044f, \u0447\u0442\u043e \u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u00ab\u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0430\u043a\u0438\u043c-\u043b\u0438\u0431\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043d\u0435 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u0443\u044f \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b.", "creation_timestamp": "2026-08-21T00:00:08.529850Z"}, {"uuid": "256fffe5-b8f2-480b-9a52-01a6858a9a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://t.me/true_secator/8492", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043f\u0440\u0438\u043d\u044f\u043b\u043e\u0441\u044c \u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Progress Kemp LoadMaster.\n\nKemp LoadMaster - \u044d\u0442\u043e \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (ADC) \u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f, Amazon, \u0412\u0412\u0421 \u0421\u0428\u0410) \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u0435\u0436\u0434\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\nProgress Software \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e 80% \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Fortune 500 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u0430 Kemp LoadMaster \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0430 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 100 000 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a\u00a0CVE-2026-8037, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 LoadMaster, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 API \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\n\nProgress Software \u0432 \u0438\u044e\u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Kemp LoadMaster (GA v7.2.63.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0438 LTSF v7.2.54.17 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442\u00a0\u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 MOVEit WAF (Web Application Firewall) \u0434\u043e GA v7.2.63.2\u00a0.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver, \u043e\u043a\u043e\u043b\u043e 300 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Kemp LoadMaster \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0441\u0435\u0442\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0442\u043e\u043c, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430\u043c\u0438 \u0438\u043b\u0438 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u0430\u0442\u0430\u043a CVE-2026-8037. \u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 CISA\u00a0\u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0435\u0435\u00a0\u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Progress \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u043e\u0441\u043b\u0430\u043b\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c ShareFile, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0437\u043e\u043d \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0441 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u0442\u043e\u0433\u0434\u0430 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043a\u0430\u043a \u00ab\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u0443\u044e \u0432\u043d\u0435\u0448\u043d\u044e\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00bb, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u044d\u0442\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438.\n\n\u041f\u043e\u0437\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 0-day, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0443\u0442\u0438 \u0432 ShareFile, \u043e\u0442\u043c\u0435\u0447\u0430\u044f, \u0447\u0442\u043e \u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u00ab\u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0430\u043a\u0438\u043c-\u043b\u0438\u0431\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043d\u0435 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u0443\u044f \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b.", "creation_timestamp": "2026-08-14T00:00:09.086588Z"}, {"uuid": "ea1f30d1-c425-4ef6-97f4-77517d0a72ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92660", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-8037-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Caster-chen\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 11:51:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u5305\u62ec\u80fd\u6267\u884c\u7684\u547d\u4ee4\u63a2\u6d4b\u548c\u4e00\u952egetshell\uff08\u9700\u8981\u670d\u52a1\u5668\u90e8\u7f72\u670d\u52a1\uff09\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:33.880853Z"}, {"uuid": "6ed44482-ba25-44c0-8d76-ac548f994da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3msj3nvbl2p2f", "content": "\ud83d\uded1 CVE-2026-8037\nProgress LoadMaster\nCVSS 9.6 / EPSS 85% / KEV: No\nTL;DR: OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products\u2026\nhttps://cvesentinel.com/report/CVE-2026-8037?utm_source=bluesky&amp;utm_medium=social&amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-07T17:33:40.222498Z"}, {"uuid": "1fb60cbe-4240-46bf-ac1f-821fd199929f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117055491493877536", "content": "CISA has added one vulnerability to the KEV catalogue:\nCVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA \nCisco:\nNEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco \nPalo Alto:\nCRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288 \nMicrosoft:\nSeveral updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft \nGoogle:\nNew: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome \nBroadcom:\nOne new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory\nPosted yesterday:\nApple security updates https://support.apple.com/en-us/100100 #Apple \nAMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD \nDell:\nCRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL", "creation_timestamp": "2026-08-07T17:50:55.021924Z"}, {"uuid": "f126384f-b2b3-4cda-bbca-14c13e9929a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9384", "content": "\ud83d\udea8 ALERT - Attackers are trying to exploit CVE-2026-8037 in Progress Kemp LoadMaster.\n\nThe CVSS 9.6 flaw enables unauthenticated OS command injection and arbitrary code execution on vulnerable appliances.\n\neSentire says the attempts it saw failed, but PoC details are now public.\n\nRead: https://thehackernews.com/2026/07/latest-progress-kemp-loadmaster-pre.html", "creation_timestamp": "2026-07-15T12:00:03.153138Z"}, {"uuid": "56cab5a8-9cd8-4336-aa9f-ea023cfc5944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9364", "content": "\u26a0\ufe0f Public PoC is out for CVE-2026-8037, a critical Progress Kemp LoadMaster API flaw.\n\nIt lets unauthenticated attackers run root commands when the API is enabled.\n\nPatch now. Restrict API exposure.\n\nFull story: https://thehackernews.com/2026/06/progress-kemp-loadmaster-flaw-could-let.html", "creation_timestamp": "2026-07-15T12:00:03.282603Z"}, {"uuid": "09e2c823-1e4a-4ace-9632-88786715efd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqovuigffi24", "content": "\ud83d\udd17 CVE : CVE-2026-8037, CVE-2026-33691, CVE-2026-8037", "creation_timestamp": "2026-07-15T14:15:34.101703Z"}, {"uuid": "2aebdcc5-756a-4788-9a48-303fa8fa4852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9384", "content": "\ud83d\udea8 ALERT - Attackers are trying to exploit CVE-2026-8037 in Progress Kemp LoadMaster.\n\nThe CVSS 9.6 flaw enables unauthenticated OS command injection and arbitrary code execution on vulnerable appliances.\n\neSentire says the attempts it saw failed, but PoC details are now public.\n\nRead: https://thehackernews.com/2026/07/latest-progress-kemp-loadmaster-pre.html", "creation_timestamp": "2026-07-16T00:00:11.591410Z"}, {"uuid": "16ac4075-44c7-4fab-a22b-057bbe7b64b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9364", "content": "\u26a0\ufe0f Public PoC is out for CVE-2026-8037, a critical Progress Kemp LoadMaster API flaw.\n\nIt lets unauthenticated attackers run root commands when the API is enabled.\n\nPatch now. Restrict API exposure.\n\nFull story: https://thehackernews.com/2026/06/progress-kemp-loadmaster-flaw-could-let.html", "creation_timestamp": "2026-07-16T00:00:19.136283Z"}, {"uuid": "71610294-4d63-43ab-b562-05b4be49146c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "content": "", "creation_timestamp": "2026-07-16T19:00:15.437803Z"}, {"uuid": "458e37c3-d746-46c8-b41d-5ec0243373e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "Telegram/PPrzS3gz9qQLgzr1WoRl3iwYb9bYPZPQYF8TcZKF9BE1m-w", "content": "", "creation_timestamp": "2026-07-16T19:00:26.786989Z"}, {"uuid": "91c8cfcb-13ed-4887-b221-6532094a2ec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "Telegram/kQBPOJZRPfFE-rjb5OWBI31fcS08jxE2VBe_KgzBWEfjeHI", "content": "", "creation_timestamp": "2026-07-16T19:00:26.632830Z"}, {"uuid": "ddd43b55-128f-4757-a97a-6811c7f11ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "content": "", "creation_timestamp": "2026-07-17T00:00:30.867221Z"}, {"uuid": "a281115b-291b-4dd6-99f3-b6cc917c9e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "Telegram/kQBPOJZRPfFE-rjb5OWBI31fcS08jxE2VBe_KgzBWEfjeHI", "content": "", "creation_timestamp": "2026-07-17T00:00:43.005391Z"}, {"uuid": "9259220b-19cd-437b-8ba3-3891a9b62880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "Telegram/PPrzS3gz9qQLgzr1WoRl3iwYb9bYPZPQYF8TcZKF9BE1m-w", "content": "", "creation_timestamp": "2026-07-17T00:00:43.201106Z"}, {"uuid": "b177324f-c904-4d68-a43c-132e77e45053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "Telegram/kQBPOJZRPfFE-rjb5OWBI31fcS08jxE2VBe_KgzBWEfjeHI", "content": "", "creation_timestamp": "2026-07-18T00:00:08.538671Z"}, {"uuid": "23f7bfed-1dbb-4afc-a954-fcb79c3dd1df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "Telegram/PPrzS3gz9qQLgzr1WoRl3iwYb9bYPZPQYF8TcZKF9BE1m-w", "content": "", "creation_timestamp": "2026-07-18T00:00:08.235078Z"}, {"uuid": "2203fa0f-a0ee-4a60-830f-fe43950703b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "content": "", "creation_timestamp": "2026-07-18T00:00:41.755238Z"}, {"uuid": "fed1403c-57c6-4b69-908b-fc89de95ab8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "seen", "source": "Telegram/Y9bJcihIH0kSkRnP4M-vOiV0LMyw9ekkVBc0mucwgsXuvA", "content": "", "creation_timestamp": "2026-07-18T13:00:04.607446Z"}, {"uuid": "99fc0f48-8d8d-41a3-bb03-79dcd291cdb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "published-proof-of-concept", "source": "Telegram/Y9bJcihIH0kSkRnP4M-vOiV0LMyw9ekkVBc0mucwgsXuvA", "content": "", "creation_timestamp": "2026-07-19T00:00:27.482443Z"}, {"uuid": "417f00ce-5e44-4c7b-b3e8-3a672e42c0b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8037", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2545", "content": "\ud83d\udd34 CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability\n\nThe US cybersecurity agency CISA has urged federal agencies to immediately patch a critical-severity vulnerability in Progress Kemp LoadMaster that has been exploited in the wild.\n\nTracked as CVE-2026-8037 (CVSS score of 9.6), the flaw is described as an OS command injection that could be exploited without authentication for remote code execution (RCE).\n\nAccording to Progress\u2019 advisory, a remote attacker could exploit the bug through unsanitized API inputs to execute arbitrary commands on the LoadMaster appliance.\n\nDisclosed on June 4 alongside CVE-2026-33691, the security defect also affects ECS Connection Manager, Connection Manager for ObjectScale, and MOVEit WAF.", "creation_timestamp": "2026-08-23T00:00:47.036363Z"}]}