CVE-2021-38289

An issue has been discovered in Novastar-VNNOX-iCare Novaicare 7.16.0 that gives attacker privilege escalation and allows attackers to view corporate information and SMTP server details, delete users, view roles, and other unspecified impacts. NOTE: As of April 2026, the vendor has officially decommissioned the affected legacy endpoints and associated services. The vulnerability is mitigated as the functional logic is no longer operational and the URLs have been removed from production.

• CWE-732

• https://github.com/viperbluff/Novastar-VNNOX-iCare-Privilege-EscalationExploit, Third Party Advisory
• https://security.novaicare.com/advisory-cve-2021-38289.html
• https://twitter.com/viperbluff/status/1439941380244230150?s=20&t=iPSn8eNxaxUKis5OKSQJRQExploit, Third Party Advisory
• https://github.com/viperbluff/Novastar-VNNOX-iCare-Privilege-EscalationExploit, Third Party Advisory
• https://twitter.com/viperbluff/status/1439941380244230150?s=20&t=iPSn8eNxaxUKis5OKSQJRQExploit, Third Party Advisory

Published

Jul 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-38268The Dynamic Data Mapping module in Liferay Portal 7.0.0 thro…6.5
• CVE-2021-38269Cross-site scripting (XSS) vulnerability in the Gogo Shell m…5.4
• CVE-2021-3827A flaw was found in keycloak, where the default ECP binding …6.8
• CVE-2021-38278Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a …9.8
• CVE-2021-3828nltk is vulnerable to Inefficient Regular Expression Complex…7.5
• CVE-2021-38283Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows …7.5
• CVE-2021-3829openwhyd is vulnerable to URL Redirection to Untrusted Site6.1
• CVE-2021-38290A host header attack vulnerability exists in FUEL CMS 1.5.0 …8.1
• CVE-2021-38291FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df…7.5
• CVE-2021-38294A Command Injection vulnerability exists in the getTopologyH…9.8
• CVE-2021-38295In Apache CouchDB, a malicious user with permission to creat…7.3
• CVE-2021-38296Apache Spark supports end-to-end encryption of RPC connectio…7.5