ZDI-26-052 HIGH 7.1 Published Feb 02, 2026

Progress Software Kemp LoadMaster getcipherset Command Injection Remote Code Execution Vulnerability

Progress

Progress Software's Kemp LoadMaster contains a code execution vulnerability (CVE-2025-13444) that allows authenticated network-adjacent attackers to execute arbitrary code on affected systems with a CVSS score of 7.1. An attacker with valid credentials can leverage this flaw to gain code execution capabilities on the load balancer, potentially compromising the device and the infrastructure it manages. Security teams should prioritize patching Kemp LoadMaster installations, enforce strong authentication controls, and restrict network access to the affected systems until updates are applied.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy