← Database

CVE-2021-41738

HIGH CVSS: 8.8 Published: 2022-06-11 Modified: 2026-06-17

Description

ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticated attacker to execute system commands.

Affected Platforms

Zeroshell Zeroshell

Weakness Type

CWE-78

References