Cybersecurity Weekly Update: 3 - 10 August 2026
1. Progress Kemp LoadMaster Under Active Exploitation
Adversaries are actively exploiting a critical OS command injection vulnerability in Progress Kemp LoadMaster application delivery controllers. The flaw allows unauthenticated remote attackers to gain root access to the network edge via a single crafted HTTP request. Mass active attacks have been confirmed.
CVE ID: CVE-2026-8037 (CVSS Score: 9.8)
Why It Matters: LoadMaster appliances handle central load balancing and traffic orchestration for critical enterprise boundaries, including online banking applications, patient portals, and university access nodes. An edge compromise grants threat actors an unauthenticated root entry point to map out internal corporate subnets.
Actions: Upgrade LoadMaster GA deployments to version 7.2.63.2 (or LTSF to 7.2.54.18) immediately. Restrict management API access to trusted administrative IP ranges.
Source: Hard2bit – CVE-2026-8037
2. Check Point Security Management Authentication Bypass Disclosed
A critical vulnerability in Check Point Security Management Server (SMS) and Multi-Domain Security Management Server (MDS) platforms allows unauthenticated remote attackers to bypass authentication controls. An unauthenticated attacker could execute arbitrary commands.
CVE ID: CVE-2026-18574 (CVSS Score: 9.3)
Why It Matters: Check Point management servers govern core firewall configurations and trust topologies for defense, healthcare, and infrastructure networks. Exploiting this management plane can result in the full compromise of the security management system.
Actions: Apply the designated vendor hotfixes referenced in Check Point advisory sk185222 immediately. Isolate management services from the public internet.
3. Gunra Ransomware Shifts Focus to Critical Infrastructure OT
A coordinated global campaign involving the newly emerged Gunra ransomware strain has prompted joint cybersecurity warnings from international intelligence agencies, including the FBI and CISA.
Why It Matters: Gunra ransomware operators rely heavily on a double-extortion model—exfiltrating high-value datasets before running automated network-wide encryption. This variant explicitly targets internet-facing security equipment and critical infrastructure. This hybrid targeting approach is designed to disrupt physical manufacturing pipelines and public health facilities simultaneously.
Actions: Enforce rigid, air-gapped network segmentation between corporate IT environments and physical operational technology (OT) equipment. Implement offline, multi-factor-authenticated backups.
Source: Yonhap News Agency
4. Metabase Zero-Day Exploited to Breach Commercial Cloud Environments
A critical zero-day SQL injection vulnerability affecting the /api/session/reset_password endpoint of the Metabase business intelligence engine has been exploited in the wild.
Why It Matters: Metabase is an analytical software platform frequently relied upon by fintech developers, medical research teams, and educational institutions. Threat actors have capitalized on unauthenticated administrative access to dump large repositories of customer data, including names, hashes, and API keys, from major tech firms.
Actions: Immediately identify any instance running an affected Metabase version (v1.58 and later). Apply the vendor's emergency upgrades and rotate credentials for every connected database.
Key Recommendations
Enforce Out-of-Band Management Locks: Ensure centralized infrastructure engines, such as Check Point SMS and Metabase consoles, are entirely decoupled from public-facing internet routes. Protect entry vectors with hardware-backed multi-factor authentication.
Execute Proactive Edge Hunting: Deploy automated SIEM detection rules looking for percent-encoded API manipulation on perimeter balancers and check endpoint process trees for illegitimate reverse-tunneling proxies.
Harden Supply Chain Environments: Prioritize rapid emergency patching cycles of 24–48 hours for perimeter defenses and cloud data aggregators with confirmed active exploitation histories.
