Vulnerabilities

CVSS

9.8 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Risk score

100.0

Known exploited

CISA KEV

Published

2021-02-16

Status

Analyzed

Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. The fixed version is FTA_9_12_380 and later.

Coverage 2

threat-intel

⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More

This week saw a surge in high-impact cyberattacks and vulnerabilities, highlighting the increasing sophistication and speed of threat actors. AI is now being weaponized to craft exploit scripts targeting Siemens PLCs, wh…

The Hacker News · 6d ago High

CVE-2026-19478CVE-2021-27101CVE-2023-34362UNRUvulnerabilitysupply-chainransomware

threat-intel

Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data

A sophisticated, custom-built web shell, specifically designed for PTC Windchill and FlexPLM, has been deployed by the Clop ransomware gang. This web shell is capable of decrypting credentials, mapping sensitive data, an…

The Hacker News · Aug 19, 2026 High

CVE-2026-12569CVE-2021-27101CVE-2023-34362web shellcredential theftransomware

All articles mentioning it

Advisories and references

• github.com/accellion/CVEs/blob/main/CVE-2021-27101.txt
• accellion.com/products/fta/
• github.com/accellion/CVEs/blob/main/CVE-2021-27101.txt
• accellion.com/products/fta/
• cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-...