VULNERABILITY INTELLIGENCE

CVE-2021-26608

CVSS score8.8 HIGH
EPSS probability0.60%
CISA KEVNot currently listed
Published2021-09-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

An arbitrary file download and execution vulnerability was found in the HShell.dll of handysoft Co., Ltd groupware ActiveX module. This issue is due to missing support for integrity check of download URL or downloaded file hash.

Weakness classification

  • CWE-345: Insufficient Verification of Data Authenticity
  • CWE-353: Missing Support for Integrity Check

Primary references