CVE-2021-41408

9.8 criticalEPSS 1.1%

Critical (9.8) in voipmonitor voipmonitor. EPSS 1.1% chance of exploitation in the next 30 days.

VoIPmonitor WEB GUI up to version 24.61 is affected by SQL injection through the "api.php" file and "user" parameter.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2022-06-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19