CVE-2021-26705

9.1 criticalEPSS 2.1%

Critical (9.1) in squarebox catdv. EPSS 2.1% chance of exploitation in the next 30 days.

An issue was discovered in SquareBox CatDV Server through 9.2. An attacker can invoke sensitive RMI methods such as getConnections without authentication, the results of which can be used to generate valid authentication tokens. These tokens can then be used to invoke administrative tasks within the application, such as disclosing password hashes.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2021-03-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

squarebox:catdv

References

https://www.exploit-db.com/exploits/49621
https://www.exploit-db.com/exploits/49621

Check your stack JSON