CVE-2021-27574

An issue was discovered in Emote Remote Mouse through 4.0.0.0. It uses cleartext HTTP to check, and request, updates. Thus, attackers can machine-in-the-middle a victim to download a malicious binary in place of the real update, with no SSL errors or warnings.

• CWE-319

• https://axelp.io/MouseTrapExploit, Third Party Advisory
• https://remotemouse.net/blog/Product
• https://axelp.io/MouseTrapExploit, Third Party Advisory
• https://remotemouse.net/blog/Product

Published

May 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27568An issue was discovered in netplex json-smart-v1 through 201…5.9
• CVE-2021-27569An issue was discovered in Emote Remote Mouse through 4.0.0.…5.3
• CVE-2021-27570An issue was discovered in Emote Remote Mouse through 3.015.…5.3
• CVE-2021-27571An issue was discovered in Emote Remote Mouse through 4.0.0.…5.3
• CVE-2021-27572An issue was discovered in Emote Remote Mouse through 4.0.0.…8.1
• CVE-2021-27573An issue was discovered in Emote Remote Mouse through 4.0.0.…9.8
• CVE-2021-27576If was found that the NetTest web service can be used to ove…7.5
• CVE-2021-27577Incorrect handling of url fragment vulnerability of Apache T…7.5
• CVE-2021-27578Cross Site Scripting vulnerability in markdown interpreter o…6.1
• CVE-2021-27579Snow Inventory Agent through 6.7.0 on Windows uses CPUID to …7.8
• CVE-2021-27581The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows …9.8
• CVE-2021-27582org/mitre/oauth2/web/OAuthConfirmationController.java in the…9.1