Actively exploited
Listed in CISA’s Known Exploited Vulnerabilities catalog since November 3, 2021.
CVE-2021-22005
VMware vCenter Server File Upload Vulnerability
Added to KEV November 3, 2021
Alert details
- Source feed
- CISA KEV
- CVE ID
- CVE-2021-22005
- CWE
- CWE-23
- Affected products
- vCenter Server · VMware vCenter Server · VMware
What happened
VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code.
What it means for your business
VMware vCenter Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-22005). VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
Required action
Apply updates per vendor instructions.
CISA due date: November 17, 2021
Sources
Related briefs
North Korean IT Workers Expanding Use of Facilitators, Broadening Recruitment
North Korean IT Workers Expanding Use of Facilitators, Broadening Recruitment — FBI IC3 industry advisory relevant to cyber risk. PremierePC monitors federal alerts for Upstate SC businesses. Read the source link for full guidance or open a ticket if you want help assessing impact.
- Vendor:FBI IC3
Windows Internet Information Services Denial of Service vulnerability
Windows Internet Information Services Denial of Service vulnerability (CVE-2026-97830) was added to Microsoft’s security update guidance. <p>Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft OpenSSH for Windows Remote Code Execution vulnerability
Microsoft OpenSSH for Windows Remote Code Execution vulnerability (CVE-2026-97816) was added to Microsoft’s security update guidance. <p>Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Windows Error Reporting Remote Code Execution vulnerability
Windows Error Reporting Remote Code Execution vulnerability (CVE-2026-97815) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Need help patching?
PremierePC monitors KEV alerts for managed clients and helps teams prioritize remediation before attackers do.