CVE-2021-47850

8.7 highEPSS 1.4%

High (8.7) in yodinfo mini mouse. EPSS 1.4% chance of exploitation in the next 30 days.

Mini Mouse 9.2.0 contains a path traversal vulnerability that allows remote attackers to access arbitrary system files and directories through crafted HTTP requests. Attackers can retrieve sensitive files like win.ini and list contents of system directories such as C:\Users\Public by manipulating file and path parameters.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2026-01-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

yodinfo:mini_mouse

References

https://apps.apple.com/us/app/mini-mouse-remote-control/id914250948
https://www.exploit-db.com/exploits/49744
https://www.vulncheck.com/advisories/mini-mouse-path-traversal

Check your stack JSON