Progress Kemp LoadMaster suffers pre‑auth RCE, attackers already probing it
A pre‑authentication remote code execution flaw (CVE‑2026‑8037) in Progress Kemp LoadMaster lets unauthenticated attackers run arbitrary root commands via an uninitialized‑memory bug in the dodelapikey API. eSentire’s Threat Response Unit says exploitation attempts are already underway, forcing admins to patch immediately.