What’s Vulnerable › Vulnerabilities

CVE-2021-44351

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-01-06 · updated 2026-06-17
• Weakness: CWE-22

Description

An arbitrary file read vulnerability exists in NavigateCMS 2.9 via /navigate/navigate_download.php id parameter.

Affected products

• Naviwebs S.C. Navigate CMS: 2.9

References

• https://github.com/NavigateCMS/Navigate-CMS/issues/28
• https://github.com/NavigateCMS/Navigate-CMS/issues/28

Get alerted when CVE-2021-44351 or the next vulnerability affects your stack