Tag: CVE-2026-33691

Critical CVEs

Progress Kemp LoadMaster Pre-Auth Root Command Injection Flaw (CVE-2026-8037) Patched

A critical vulnerability in Progress Kemp LoadMaster, tracked as CVE-2026-8037 with a CVSS score of 9.8, allows unauthenticated attackers to execute arbitrary…

API Security Canadian Centre for Cyber Security Cl0p command injection

June 30, 2026

Critical CVEs

CVE-2026-33691: Progress Kemp LoadMaster WAF Bypass via Whitespace Padding

A high-severity flaw in Progress Kemp LoadMaster allows WAF bypass by using whitespace padding in filenames to circumvent file upload extension checks.

CVE-2026-33691 file upload Progress Kemp LoadMaster WAF bypass

June 30, 2026