IT security 2026-08-09

Level Tense — 75/100 — 2026-08-09

Tense day: 5 stories ranked, 3 of the top 5 reported as actively exploited, 0 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Progress Kemp LoadMaster command injection flaw is actively exploited (89/100).

1. Progress Kemp LoadMaster command injection flaw is actively exploited — 89/100 (CVE-2026-8037)
2. Metabase warns of exploited zero-day allowing unauthenticated SQL injection and admin access — 70/100
3. N-able releases N-central Hotfix 2 amid ongoing exploitation reaching managed systems — 70/100
4. Rovo prompt injection can expose Jira and Confluence data to outside servers — 60/100
5. Research identifies CSS attack chains affecting major webmail services — 52/100