VULNERABILITY INTELLIGENCE

CVE-2021-42129

CVSS score8.8 HIGH

EPSS probability77.26%

CISA KEVNot currently listed

Published2021-12-07

Last modified2026-06-17

Description

A command injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution.