High severity8.1NVD Advisory· Published Feb 8, 2021· Updated Jun 17, 2026
CVE-2021-26914
CVE-2021-26914
Description
NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in MvcUtil valueStringToObject.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- NetMotion/Mobilitydescription
- Range: <11.73, <12.02
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/162617/NetMotion-Mobility-Server-MvcUtil-Java-Deserialization.htmlnvdExploitThird Party AdvisoryVDB Entry
- ssd-disclosure.comnvdExploitThird Party Advisory
- ssd-disclosure.com/ssd-advisory-netmotion-mobility-server-multiple-deserialization-of-untrusted-data-lead-to-rce/nvdExploitThird Party Advisory
- www.netmotionsoftware.com/security-advisories/security-vulnerability-in-mobility-web-server-november-19-2020nvdVendor Advisory
News mentions
0No linked articles in our index yet.