CVE-2026-21537

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Feb 10, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-21546.1A vulnerability was identified in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Impacted is an unknown funCVE-2026-215487.5In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges neeCVE-2026-215497.5In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privilegesCVE-2026-21557.2A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub_4208A0 of the file /goform/set_dmz oCVE-2026-215507.5In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privilegesCVE-2026-215517.5In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privilegesCVE-2026-215527.5In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privilegesCVE-2026-215537.5In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privilegesCVE-2026-215547.5In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privilegesCVE-2026-215557.5In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privilegesCVE-2026-21564.8A weakness has been identified in code-projects Online Student Management System 1.0. The impacted element is an unknown function of the filCVE-2026-215697.9This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7.1.0 of Crowd Data Center and Server. Th
CVE-2026-21537: High severity, CVSS 8.8 | Vulnix