CVE-2021-26837

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Sep 19, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-268437.5An issue was discovered in sthttpd through 2.27.1. On systems where the strcpy function is implemented with memcpy, the de_dotdot function mCVE-2021-268445.4A cross-site scripting (XSS) vulnerability in Power Admin PA Server Monitor 8.2.1.1 allows remote attackers to inject arbitrary web script oCVE-2021-268457.5Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report data if the URL used tCVE-2021-268546.6Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-268559.1Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-268577.8Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-268587.8Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-268597.7Microsoft Power BI Information Disclosure VulnerabilityCVE-2021-268607.8Windows App-V Overlay Filter Elevation of Privilege VulnerabilityCVE-2021-268617.8Windows Graphics Component Remote Code Execution VulnerabilityCVE-2021-268627.0Windows Installer Elevation of Privilege VulnerabilityCVE-2021-268637.0Windows Win32k Elevation of Privilege Vulnerability