CVE-2021-26597

PoC —

CVSS 3.1

6.5 medium

EPSS

1%p72

Published

Mar 25, 2021 (Mar 25, 2021)

Modified

Jun 17, 2026

Description

An issue was discovered in Nokia NetAct 18A. A remote user, authenticated to the NOKIA NetAct Web Page, can visit the Site Configuration Tool web site section and arbitrarily upload potentially dangerous files without restrictions via the /netact/sct dir parameter in conjunction with the operation=upload value.

Vendors: nokia
Products: netact
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news1 stories

Tim’s RED Team Research reports 3 new CVEs, two of which on 4G/5G.

Security AffairsOct 2, 08:19 UTC · Oct 2, 2021AI safety & security CVE-2021-26597 CVE-2021-26596 CVE-2021-3314