Live › vulnerability › CVE-2021-1498
Go to dashboardCisco HyperFlex HX Installer Virtual Machine has an input validation flaw that lets an attacker run commands on the device as the tomcat8 user. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Cisco HyperFlex HX | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Apply the updates per Cisco's vendor instructions; the sources do not name a fixed version.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
This page as .md · .json · in your agent: get_signal("CVE-2021-1498")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.