CVE-2021-21976

7.2 highEPSS 2.1%

High (7.2) in vmware vsphere replication. EPSS 2.1% chance of exploitation in the next 30 days.

vSphere Replication 8.3.x prior to 8.3.1.2, 8.2.x prior to 8.2.1.1, 8.1.x prior to 8.1.2.3 and 6.5.x prior to 6.5.1.5 contain a post-authentication command injection vulnerability which may allow an authenticated admin user to perform a remote code execution.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2021-02-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vmware:vsphere_replication

References

https://www.vmware.com/security/advisories/VMSA-2021-0001.html
https://www.vmware.com/security/advisories/VMSA-2021-0001.html

Check your stack JSON