---METADATA---
VENDOR: Progress
PRODUCT: LoadMaster
AFFECTED_VERSIONS: Progress Software LoadMaster: V7.2.60.0 up to (excluding) V7.2.63.2, V7.2.45.12 up to (excluding) V7.2.54.18; ECS Connections Manager: V7.2.60.0 up to (excluding) V7.2.63.2; Object Scale Connection Manager: V7.2.60.0 up to (excluding) V7.2.63.2; MOVEit WAF: V7.2.60.0 up to (excluding) V7.2.63.2
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Progress LoadMaster and associated products are vulnerable to command injection, which allows unauthenticated attackers to execute arbitrary commands on the underlying system.

Executive Summary:
A critical command injection vulnerability in Progress LoadMaster is currently being exploited in the wild, posing a severe risk of total system compromise.

Vulnerability Details

CVE-ID: CVE-2026-8037

Affected Software: Progress LoadMaster, ECS Connections Manager, Object Scale Connection Manager, and MOVEit WAF

Affected Versions: See metadata for specific version ranges.

Vulnerability: This vulnerability is a command injection flaw (CWE-77) occurring in the management interfaces of the affected software. It allows an unauthenticated attacker to inject and execute arbitrary operating system commands with high privileges.

Business Impact

Successful exploitation results in full control over the affected appliance, leading to unauthorized access to sensitive data, potential lateral movement within the network, and complete service disruption. Given the CVSS score of 9.5 and confirmed active exploitation, organizations face an extreme risk of data exfiltration and operational downtime.

Remediation Plan

Immediate Action: Apply the vendor-provided security updates immediately to address the vulnerability. If immediate patching is not possible, follow the specific mitigation instructions provided in the official Progress security bulletin.

Proactive Monitoring: Review system logs for unusual process execution or unauthorized command-line activity originating from the load balancer. Monitor network traffic for suspicious patterns directed at management interfaces.

Compensating Controls: Restrict access to the management interface of the LoadMaster appliance to known, trusted administrative IP addresses using firewall rules or ACLs to reduce the attack surface.

Exploitation Status

Public Exploit Available: Yes, a Nuclei detection template exists.

Analyst Notes: This vulnerability is confirmed to be actively exploited in the wild as of August 7, 2026. While weaponized exploit code is not currently confirmed in public repositories, the active exploitation and availability of detection templates necessitate immediate remediation.

Analyst Recommendation

The combination of a 9.5 severity score and active exploitation in the wild makes this a top-priority security event. Administrators must prioritize the application of vendor patches or documented mitigations to prevent unauthorized system access and potential data loss.

---METADATA---
VENDOR: MOSK Information Technologies Ltd.
PRODUCT: CBS Platform
AFFECTED_VERSIONS: Through 09062026
---END_METADATA---

Description Summary:
The MOSK Information Technologies Ltd. CBS Platform contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary database commands.

Executive Summary:
A critical SQL injection vulnerability in the unsupported MOSK CBS Platform exposes the entire backend database to unauthenticated remote exploitation.

Vulnerability Details

CVE-ID: CVE-2026-8025

Affected Software: MOSK Information Technologies Ltd. CBS Platform

Affected Versions: Through 09062026

Vulnerability: This flaw stems from improper neutralization of special elements within SQL commands, enabling unauthenticated attackers to manipulate database queries. The vulnerability exists within the core platform architecture.

Business Impact

With a CVSS score of 9.8, this vulnerability presents a catastrophic risk to data confidentiality, integrity, and availability. Successful exploitation allows attackers to dump sensitive information, modify records, or potentially gain full control over the underlying database server, leading to severe reputational damage and regulatory non-compliance.

Remediation Plan

Immediate Action: As the product is unsupported by the vendor, immediate decommissioning of the affected platform is required to eliminate the risk.

Proactive Monitoring: Review database audit logs for unusual query patterns, such as unexpected use of SQL keywords or attempts to access unauthorized system tables.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection protection rules to filter malicious payloads, though this should be considered a temporary measure only.

Exploitation Status

Public Exploit Available: unknown

Analyst Notes: As of Jun 9, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw and the lack of vendor support, the potential for exploitation is high.

Analyst Recommendation

Given the critical nature of this vulnerability and the lack of future security patches from the vendor, organizations must prioritize the migration away from the CBS Platform. Continued use of this software poses an unacceptable security risk that cannot be mitigated through standard patching.

---METADATA---
VENDOR: Zephyr Project
PRODUCT: Zephyr RTOS
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A directory traversal or unauthorized file access vulnerability exists within the Zephyr HTTP server when using the static-filesystem resource type.

Executive Summary:
The Zephyr HTTP server contains a high-severity vulnerability that allows unauthorized access to files, potentially exposing sensitive system information.

Vulnerability Details

CVE-ID: CVE-2026-8023

Affected Software: Zephyr Project Zephyr RTOS

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The HTTP server implementation in the Zephyr RTOS, specifically the static-filesystem resource type, fails to properly restrict access when CONFIG_FILE_SYSTEM is enabled. This allows unauthenticated remote attackers to potentially read files outside the intended root directory.

Business Impact

A CVSS score of 7.5 highlights the severity of this unauthorized access vulnerability. In an embedded context, this could lead to the exposure of sensitive configuration files, credentials, or proprietary data, significantly increasing the risk of full device compromise and loss of operational control.

Remediation Plan

Immediate Action: Apply the vendor-provided patch to the Zephyr RTOS source code or update to a version where this file access path is properly restricted.

Proactive Monitoring: Monitor network traffic for suspicious HTTP requests targeting sensitive file paths or using directory traversal sequences.

Compensating Controls: If patching is delayed, disable the CONFIG_FILE_SYSTEM feature in the HTTP server configuration if it is not strictly required for current operations.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 30, 2026, there is no public information indicating active exploitation of this vulnerability. However, the potential for exploitation is high due to the nature of the file access flaw in an RTOS environment.

Analyst Recommendation

This vulnerability represents a significant security risk for embedded systems running Zephyr. Engineering teams must review their firmware configurations and apply the necessary patches immediately to prevent unauthorized access to the underlying filesystem.

---METADATA---
VENDOR: Google
PRODUCT: Chrome
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
A Use-After-Free (UAF) vulnerability in the PresentationAPI of Google Chrome allows for potential arbitrary code execution via a specially crafted web page.

Executive Summary:
A high-severity Use-After-Free vulnerability in Google Chrome's PresentationAPI could allow a remote attacker to execute arbitrary code on the victim's system.

Vulnerability Details

CVE-ID: CVE-2026-7926

Affected Software: Google Chrome

Affected Versions: See vendor advisory for affected versions

Vulnerability: The vulnerability is a Use-After-Free flaw within the PresentationAPI component. An attacker could exploit this by enticing a user to visit a malicious website, leading to memory corruption and potential code execution.

Business Impact

A successful exploit of this Use-After-Free vulnerability could lead to arbitrary code execution within the context of the browser, potentially allowing an attacker to escape the sandbox or access sensitive user data. The CVSS score of 8.8 highlights the high risk posed, particularly for enterprise workstations where browser-based attacks are a common vector for initial compromise.

Remediation Plan

Immediate Action: Update all Google Chrome installations to version 148 or later immediately.

Proactive Monitoring: Review endpoint security logs for unusual browser activity or unexpected process terminations.

Compensating Controls: Utilize browser security policies and endpoint protection platforms to restrict the execution of untrusted scripts and monitor for malicious browser behavior.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 7, 2026, there is no public information indicating active exploitation of this vulnerability. However, Use-After-Free vulnerabilities in web browsers are frequently targeted by threat actors.

Analyst Recommendation

Browser-based vulnerabilities of this severity present an immediate threat to end-user workstations. Organizations should prioritize the deployment of the latest Chrome updates to mitigate the risk of arbitrary code execution and data theft.

---METADATA---
VENDOR: Google
PRODUCT: Chrome
AFFECTED_VERSIONS: Prior to 148.0.7778.96
---END_METADATA---

Description Summary:
A use-after-free vulnerability in the Google Chrome Fullscreen implementation allows a remote attacker to achieve sandbox escape via a crafted HTML page.

Executive Summary:
A critical use-after-free vulnerability in Google Chrome allows remote attackers to execute a sandbox escape, potentially compromising the underlying host system.

Vulnerability Details

CVE-ID: CVE-2026-7908

Affected Software: Google Chrome

Affected Versions: Prior to 148.0.7778.96

Vulnerability: This is a use-after-free memory corruption vulnerability occurring within the Fullscreen component. An unauthenticated remote attacker can trigger this flaw by enticing a user to navigate to a specifically crafted malicious web page.

Business Impact

Sandbox escape vulnerabilities represent a high-tier threat to organizational security by bypassing the primary browser security boundary. With a CVSS score of 9.6, successful exploitation could lead to arbitrary code execution on the user's host machine, resulting in full system compromise and data theft.

Remediation Plan

Immediate Action: Update Google Chrome to version 148.0.7778.96 or higher immediately.

Proactive Monitoring: Monitor endpoint security logs for unusual process spawning originating from the Chrome browser process.

Compensating Controls: Utilize browser-based security policies (e.g., managed GPO/MDM settings) to restrict access to potentially untrusted sites and enable enterprise-grade endpoint protection.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Because browser vulnerabilities are frequently targeted in drive-by-download attacks, it is imperative to enforce the update across all managed workstations and mobile devices to mitigate the risk of system-level compromise.