CVE-2021-27569

An issue was discovered in Emote Remote Mouse through 4.0.0.0. Attackers can maximize or minimize the window of a running process by sending the process name in a crafted packet. This information is sent in cleartext and is not protected by any authentication logic.

• CWE-306
• CWE-319

• https://axelp.io/MouseTrapExploit, Third Party Advisory
• https://remotemouse.net/blog/Product
• https://axelp.io/MouseTrapExploit, Third Party Advisory
• https://remotemouse.net/blog/Product

Published

May 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27559The Contact page in Monica 2.19.1 allows stored XSS via the …5.4
• CVE-2021-27561Yealink Device Management (DM) 3.6.0.20 allows command injec…9.8
• CVE-2021-27562In Arm Trusted Firmware M through 1.2, the NS world may trig…5.5
• CVE-2021-27564A stored XSS issue exists in Appspace 6.2.4. After a user is…5.4
• CVE-2021-27565The web server in InterNiche NicheStack through 4.0.1 allows…7.5
• CVE-2021-27568An issue was discovered in netplex json-smart-v1 through 201…5.9
• CVE-2021-27570An issue was discovered in Emote Remote Mouse through 3.015.…5.3
• CVE-2021-27571An issue was discovered in Emote Remote Mouse through 4.0.0.…5.3
• CVE-2021-27572An issue was discovered in Emote Remote Mouse through 4.0.0.…8.1
• CVE-2021-27573An issue was discovered in Emote Remote Mouse through 4.0.0.…9.8
• CVE-2021-27574An issue was discovered in Emote Remote Mouse through 4.0.0.…8.1
• CVE-2021-27576If was found that the NetTest web service can be used to ove…7.5