CVE-2021-31926

6.5 mediumEPSS 0.9%

Medium (6.5) in cubecoders amp. EPSS 0.9% chance of exploitation in the next 30 days.

AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the applicable API endpoint (despite not having permission to make changes to the system's network configuration).

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2021-04-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cubecoders:amp

References

https://github.com/CubeCoders/AMP/issues/443
https://github.com/CubeCoders/AMP/issues/443

Check your stack JSON