Progress Software Kemp LoadMaster getcipherset Command Injection Remote Code Execution Vulnerability
Progress Software's Kemp LoadMaster contains a code execution vulnerability (CVE-2025-13444) that allows authenticated network-adjacent attackers to execute arbitrary code on affected systems with a CVSS score of 7.1. An attacker with valid credentials can leverage this flaw to gain code execution capabilities on the load balancer, potentially compromising the device and the infrastructure it manages. Security teams should prioritize patching Kemp LoadMaster installations, enforce strong authentication controls, and restrict network access to the affected systems until updates are applied.