Progress Software Kemp LoadMaster delcert Command Injection Remote Code Execution Vulnerability
Progress Software's Kemp LoadMaster contains a remote code execution vulnerability (CVE-2025-13447) that allows authenticated network-adjacent attackers to execute arbitrary code on affected systems with a CVSS severity of 7.1. An attacker with valid credentials can exploit this flaw to gain control of the load balancer and potentially compromise the infrastructure it protects. Security teams should prioritize patching Kemp LoadMaster systems, enforce strong authentication controls, and restrict network access to the management interface as an interim mitigation.