command-injection

2 articles · newest first

Rows of rack-mounted network appliances in a data center, similar to load balancer hardware

This load balancer bug got patched in June. Hackers had a five-week head start before CISA said a word

CVE-2026-8037 lets anyone run root commands on Kemp LoadMaster appliances with zero credentials — and 792 attack attempts from 65 IP addresses landed before it made the federal watch list.

Priya Nair · Aug 23 · 6 min

Rows of server racks in a data center representing an email server infrastructure

Software

zimbra patched this bug in july. hackers are breaking into inboxes with it right now

CERT Polska is warning that attackers are actively exploiting an unauthenticated command-injection bug in Zimbra's SNMP monitoring component — one Zimbra quietly fixed five weeks ago, in version 10.1.20.

Priya Nair · Aug 22 · 6 min