What’s Vulnerable › Vulnerabilities

CVE-2021-41739

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-05-05 · updated 2026-06-17
• Weakness: CWE-78

Description

A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000. Attackers can execute OS commands in cyrus.events.php with GET param logs and POST param rp.

Affected products

• Artica Tech Artica Proxy: 4.30.000000

References

• https://medium.com/%40rootless724/artica-proxy-4-30-cyrus-events-php-rce-3aa2a868c695
• https://medium.com/%40rootless724/artica-proxy-4-30-cyrus-events-php-rce-3aa2a868c695

Get alerted when CVE-2021-41739 or the next vulnerability affects your stack