CVE-2021-28271

8.8 highEPSS 1.9%

High (8.8) in soyal. EPSS 1.9% chance of exploitation in the next 30 days.

Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag (Full) for 'Everyone'and 'Authenticated Users' group.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2021-04-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

soyal:701clientsql
soyal:701server
soyal:701serversql

References

https://www.exploit-db.com/exploits/49678
https://www.zeroscience.mk/en/vulnerabilities
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5633.php
https://www.exploit-db.com/exploits/49678
https://www.zeroscience.mk/en/vulnerabilities

Check your stack JSON