← ExploitWatch
HomeExploited Vulnerabilities

CVE-2021-27104 — Actively Exploited: FTA (Accellion)

Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.

CVE IDCVE-2021-27104
VendorAccellion
ProductFTA
Vulnerability nameAccellion FTA OS Command Injection Vulnerability
Date added2021-11-03
Remediation due2021-11-17
Known ransomware useKnown
Required actionApply updates per vendor instructions.
DescriptionAccellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →