CVE-2021-40146

A Remote Code Execution (RCE) vulnerability was discovered in the Any23 YAMLExtractor.java file and is known to affect Any23 versions < 2.5. RCE vulnerabilities allow a malicious actor to execute any code of their choice on a remote machine over LAN, WAN, or internet. RCE belongs to the broader class of arbitrary code execution (ACE) vulnerabilities.

• http://www.openwall.com/lists/oss-security/2021/09/11/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread.html/r7c521ed85c7ae1bad4fdf95b459f2aaa8a67eae338636b7b7ec35d86%40%3Cannounce.apache.org%3EMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2021/09/11/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread.html/r7c521ed85c7ae1bad4fdf95b459f2aaa8a67eae338636b7b7ec35d86%40%3Cannounce.apache.org%3EMailing List, Vendor Advisory

Published

Sep 11, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40130A vulnerability in the web application of Cisco Common Servi…4.9
• CVE-2021-40131A vulnerability in the web-based management interface of Cis…5.4
• CVE-2021-4014Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-40142In OPC Foundation Local Discovery Server (LDS) before 1.04.4…7.5
• CVE-2021-40143Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerabl…8.2
• CVE-2021-40145gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka Li…7.5
• CVE-2021-40147EmTec ZOC before 8.02.2 allows \e[201~ pastes, a different v…9.8
• CVE-2021-40148In Modem EMM, there is a possible information disclosure due…7.5
• CVE-2021-40149The web server of the E1 Zoom camera through 3.0.0.716 discl…5.9
• CVE-2021-4015firefly-iii is vulnerable to Cross-Site Request Forgery (CSR…4.3
• CVE-2021-40150The web server of the E1 Zoom camera through 3.0.0.716 discl…7.5
• CVE-2021-40153squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 store…8.1