CVE-2021-26913

HIGH 8.1CVE-2021-26913 · Published 08/02/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
netmotion mobility netmotionsoftware	`≥ 12.0, < 12.02< 11.73`	`12.0211.73`

Description

NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in RpcServlet.

References

ssd-disclosure.com · Exploit
ssd-disclosure.com/ssd-advisory-netmotion-mobility-server-multiple-deserialization-of-untrusted-data-lead-to-rce · Exploit
netmotionsoftware.com/security-advisories/security-vulnerability-in-mobility-web-server-november-19-2020 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free