Live › vulnerability › CVE-2021-21972
Go to dashboardVMware vCenter Server's vSphere Client (HTML5) has a remote code execution flaw in a vCenter Server plugin, reachable over the network on port 443 with no authentication stated in the sources. An attacker who can reach the port can run commands with unrestricted privileges on the operating system hosting vCenter Server, and this CVE is listed as exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 0h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| VMware vCenter Server | vendor | – | – |
3.10.1.2 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).
This page as .md · .json · in your agent: get_signal("CVE-2021-21972")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.