CVE-2021-26273

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The Agent in NinjaRMM 5.0.909 has Incorrect Access Control.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Jul 7, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-262747.1The Agent in NinjaRMM 5.0.909 has Insecure Permissions.CVE-2021-262759.8The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulneraCVE-2021-262765.3scripts/cli.js in the GoDaddy node-config-shield (aka Config Shield) package before 0.2.2 for Node.js calls eval when processing a set commaCVE-2021-262779.8The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actiCVE-2021-262786.3The wifi module exposes the interface and has improper permission control, leaking sensitive information about the device.CVE-2021-262795.9Some parameters of the weather module are improperly stored, leaking some sensitive information.CVE-2021-262807.9Locally installed application can bypass the permission check and perform system operations that require permission.CVE-2021-262815.5Some parameters of the alarm clock module are improperly stored, leaking some sensitive information.CVE-2021-262919.1Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, rCVE-2021-262939.8An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversaCVE-2021-262947.5An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (suchCVE-2021-262959.8Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over
CVE-2021-26273: High severity, CVSS 7.8 | Vulnix