CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-26608
Critical (9.8) in handysoft hshell. EPSS 0.6% chance of exploitation in the next 30 days.
An arbitrary file download and execution vulnerability was found in the HShell.dll of handysoft Co., Ltd groupware ActiveX module. This issue is due to missing support for integrity check of download URL or downloaded file hash.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-345, CWE-353
- Published
- Modified
- Record from
- the NVD, synced
Affected
- handysoft:hshell