Skip to content
OpenAdvisories
Critical 1 exploited CVE WID-SEC-2026-1812 2 CVEs

Kemp LoadMaster: Mehrere Schwachstellen

Published Jun 7, 2026 · Updated Sep 9, 2026 · Revision 6 · de-DE

Vendor: Kemp Vendor: SUSE Product: LoadMaster Product: openSUSE

Summary

Ein Angreifer kann mehrere Schwachstellen in Kemp LoadMaster ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren oder beliebigen Code auszuführen.

Product

LoadMaster ist eine Load Balancer Lösung von Progress Software.

Vulnerabilities 2

  • Critical 9.6
    CVE-2026-8037 Exploited Public exploit Scanner template EPSS 100%

    OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

    OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints

    Progress Software LoadMaster MOVEit WAF Object Scale Connection Manager
    KEV Aug 7, 2026
  • Medium 6.8
    CVE-2026-33691

    OWASP CRS: Whitespace padding in filenames bypasses file upload extension checks

    The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.9 and 4.25.0, a bypass was identified in OWASP CRS that allows uploading files with dangerous extensions (.php, .…

    coreruleset coreruleset modsecurity-crs modsecurity-crs Debian Ubuntu

Revision history

  1. #6

    Referenz(en) aufgenommen: ZDI-26-646, ZDI-CAN-31117

  2. #5

    Neue Updates von openSUSE aufgenommen

  3. #4

    Aktive Ausnutzung gemeldet

  4. #3

    PoC aufgenommen

  5. #2

    Referenz(en) aufgenommen: ZDI-26-342, ZDI-CAN-30437, ZDI-26-340, ZDI-CAN-30438, ZDI-26-341, ZDI-CAN-30439

  6. #1

    Initiale Fassung

References