CVE-2021-38608

HIGH 7.8CVE-2021-38608 · Published 16/08/2021 · updated 17/06/2026

In short

CVE-2021-38608 is a HIGH (CVSS 7.8) vulnerability affecting wapt (tranquil).
Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 18.1% of all vulnerabilities.
Fix: update to 2.0.0.9450, 1.8.2.7373 or later.

Package	Affected versions	Patched versions
wapt tranquil	`≥ 2.0.0.0, < 2.0.0.9450< 1.8.2.7373`	`2.0.0.94501.8.2.7373`

Description

Incorrect Access Control in Tranquil WAPT Enterprise - before 1.8.2.7373 and before 2.0.0.9450 allows guest OS users to escalate privileges via WAPT Agent.

References

tranquil.it/en/manage-it-equipment/discover-wapt · Product
wapt.fr/fr/doc/wapt-security-bulletin.html · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free