VULNERABILITY INTELLIGENCE

CVE-2021-27104

CVSS score10 HIGH

EPSS probability56.69%

CISA KEVKnown exploited vulnerability

Published2021-02-16

Last modified2026-06-17

Known Exploited Vulnerability

Accellion FTA OS Command Injection Vulnerability

Vendor / product: Accellion / FTA

Description

Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed version is FTA_9_12_380 and later.