CVE-2021-26837

PoC —

CVSS 3.1

9.8 critical

EPSS

<1%p56

Published

Sep 19, 2023 (Sep 19, 2023)

Modified

Jun 17, 2026

Description

SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information.

Vendors: fortra
Products: delivernow
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.