VULNERABILITY INTELLIGENCE

CVE-2021-41566

CVSS score9.8 CRITICAL

EPSS probability2.01%

CISA KEVNot currently listed

Published2021-10-08

Last modified2026-06-17

Description

The file extension of the TadTools file upload function fails to filter, thus remote attackers can upload any types of files and execute arbitrary code without logging in.