CVE-2021-26705

An issue was discovered in SquareBox CatDV Server through 9.2. An attacker can invoke sensitive RMI methods such as getConnections without authentication, the results of which can be used to generate valid authentication tokens. These tokens can then be used to invoke administrative tasks within the application, such as disclosing password hashes.

• CWE-306

• https://www.exploit-db.com/exploits/49621Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/49621Exploit, Third Party Advisory, VDB Entry

Published

Mar 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-26699OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev…5.4
• CVE-2021-26700Visual Studio Code npm-script Extension Remote Code Executio…7.8
• CVE-2021-26701.NET Core Remote Code Execution Vulnerability8.1
• CVE-2021-26702EPrints 3.4.2 exposes a reflected XSS opportunity in the dat…6.1
• CVE-2021-26703EPrints 3.4.2 allows remote attackers to read arbitrary file…9.8
• CVE-2021-26704EPrints 3.4.2 allows remote attackers to execute arbitrary c…8.8
• CVE-2021-26706An issue was discovered in lib_mem.c in Micrium uC/OS uC/LIB…9.8
• CVE-2021-26707The merge-deep library before 3.0.3 for Node.js can be trick…9.8
• CVE-2021-26708A local privilege escalation was discovered in the Linux ker…7
• CVE-2021-26709D-Link DSL-320B-D1 devices through EU_1.25 are prone to mult…9.8
• CVE-2021-26710A cross-site scripting (XSS) issue in the login panel in Red…6.1
• CVE-2021-26711A frame-injection issue in the online help in Redwood Report…5.3