Vulnerability · Published Jul 7, 2021 · Assigned by mitre
CVE-2021-26274
High 7.1
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).
Severity (CVSS NVD)7.1High
Exploit odds (30 days)0.4%top 69.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The Agent in NinjaRMM 5.0.909 has Insecure Permissions.
Affected products (as reported)
References
- https://www.ninjarmm.com x_refsource_MISC
- https://www.ninjarmm.com/blog/cve-2021-26273-cve-2021-26274/ x_refsource_MISC
- https://improsec.com/tech-blog/privilege-escalation-vulnerability-in-ninjarmm x_refsource_MISC