Unrated severityCISA KEVNVD Advisory· Published Feb 16, 2021· Updated Oct 21, 2025

CVE-2021-27104

Description

Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed version is FTA_9_12_380 and later.

Affected products

Accellion/FTAdescription

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/accellion/CVEs/blob/main/CVE-2021-27104.txtmitrex_refsource_MISC
www.accellion.com/products/fta/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.060