VulnSocial

CVE-2021-40438Disclosure(apache / brocade_fabric_operating_system_firmware)

LOWCVSS 9.0 · CRITICALCISA KEV

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

apache CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2021-12-15. Apply updates per vendor instructions.

Patch / fix
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • brocade_fabric_operating_system_firmware
  • cloud_backup
  • clustered_data_ontap
  • debian_linux

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
apachebroadcomdebianf5fedoraprojectnetapporacleredhat
Products
brocade_fabric_operating_system_firmwarecloud_backupclustered_data_ontapdebian_linuxenterprise_linuxenterprise_linux_eusenterprise_linux_for_arm_64enterprise_linux_for_arm_64_eusenterprise_linux_for_ibm_z_systemsenterprise_linux_for_ibm_z_systems_eus

29 versions affected across 39 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-30: 1Technical Details · 2026-07-30: 107-30
Signal classification1 categories
Disclosure
1100.0%
Referenced assets2 URLs
Full discourse1 post
  • T1erOne@tieroneforum
    Disclosure

    Offensive AI на практике: от ресёрча уязвимостей до pre-auth RCE в Cisco Expressway (CVE-2021-40438) https://tier1.life/thread/446 http://tieronemkfevyizxcnt355agysp2iemvhon6iyclwrc7yuc7oszgzrid.onion/thread/446 #articles

    Post summary

    The post announces a pre‑authentication remote code execution vulnerability in Cisco Expressway (CVE-2021-40438) but does not provide a PoC, exploit code, or evidence of active exploitation.

    00010113
    270 followersView on X
CPE platform detail84 entries

84 of 84 entries

PartVendorProductVersionTarget SWTarget HW
Appapachehttp_server---
OSbroadcombrocade_fabric_operating_system_firmware---
OSdebiandebian_linux10.0--
OSdebiandebian_linux11.0--
OSdebiandebian_linux9.0--
OSf5f5os---
OSfedoraprojectfedora34--
OSfedoraprojectfedora35--
Appnetappcloud_backup---
Appnetappclustered_data_ontap---
Appnetappstoragegrid---
Apporacleenterprise_manager_ops_center12.4.0.0--
Apporaclehttp_server12.2.1.3.0--
Apporaclehttp_server12.2.1.4.0--
Apporacleinstantis_enterprisetrack17.1--
Apporacleinstantis_enterprisetrack17.2--
Apporacleinstantis_enterprisetrack17.3--
Apporaclesecure_global_desktop5.6--
Apporaclezfs_storage_appliance_kit8.8--
OSredhatenterprise_linux7.0--
OSredhatenterprise_linux8.0--
OSredhatenterprise_linux_eus8.1--
OSredhatenterprise_linux_eus8.2--
OSredhatenterprise_linux_eus8.4--
OSredhatenterprise_linux_eus8.6--
OSredhatenterprise_linux_eus8.8--
OSredhatenterprise_linux_for_arm_648.0--
OSredhatenterprise_linux_for_arm_64_eus8.6--
OSredhatenterprise_linux_for_arm_64_eus8.8--
OSredhatenterprise_linux_for_ibm_z_systems7.0_s390x--
OSredhatenterprise_linux_for_ibm_z_systems8.0--
OSredhatenterprise_linux_for_ibm_z_systems_eus8.1--
OSredhatenterprise_linux_for_ibm_z_systems_eus8.4--
OSredhatenterprise_linux_for_ibm_z_systems_eus8.8--
OSredhatenterprise_linux_for_ibm_z_systems_eus_s390x8.2--
OSredhatenterprise_linux_for_power_big_endian7.0--
OSredhatenterprise_linux_for_power_little_endian7.0--
OSredhatenterprise_linux_for_power_little_endian8.0--
OSredhatenterprise_linux_for_power_little_endian_eus8.1--
OSredhatenterprise_linux_for_power_little_endian_eus8.2--
OSredhatenterprise_linux_for_power_little_endian_eus8.4--
OSredhatenterprise_linux_for_power_little_endian_eus8.6--
OSredhatenterprise_linux_for_power_little_endian_eus8.8--
OSredhatenterprise_linux_for_scientific_computing7.0--
OSredhatenterprise_linux_server7.0--
OSredhatenterprise_linux_server_aus7.2--
OSredhatenterprise_linux_server_aus7.3--
OSredhatenterprise_linux_server_aus7.4--
OSredhatenterprise_linux_server_aus7.6--
OSredhatenterprise_linux_server_aus7.7--
OSredhatenterprise_linux_server_aus8.2--
OSredhatenterprise_linux_server_aus8.4--
OSredhatenterprise_linux_server_aus8.6--
OSredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions7.6--
OSredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions7.7--
OSredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions8.1--
OSredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions8.2--
OSredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions8.4--
OSredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions8.6--
OSredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions8.8--
OSredhatenterprise_linux_server_tus7.6--
OSredhatenterprise_linux_server_tus7.7--
OSredhatenterprise_linux_server_tus8.2--
OSredhatenterprise_linux_server_tus8.4--
OSredhatenterprise_linux_server_tus8.6--
OSredhatenterprise_linux_server_tus8.8--
OSredhatenterprise_linux_server_update_services_for_sap_solutions7.6--
OSredhatenterprise_linux_server_update_services_for_sap_solutions7.7--
OSredhatenterprise_linux_server_workstation7.0--
OSredhatenterprise_linux_update_services_for_sap_solutions8.1--
OSredhatenterprise_linux_update_services_for_sap_solutions8.2--
OSredhatenterprise_linux_update_services_for_sap_solutions8.4--
OSredhatenterprise_linux_update_services_for_sap_solutions8.6--
OSredhatenterprise_linux_update_services_for_sap_solutions8.8--
OSredhatenterprise_linux_workstation7.0--
Appredhatjboss_core_services1.0--
Appredhatsoftware_collections1.0--
OSresfrocky_linux8.0--
Appsiemensruggedcom_nms---
Appsiemenssinec_nms---
Appsiemenssinema_remote_connect_server---
Appsiemenssinema_remote_connect_server3.2--
Appsiemenssinema_server14.0--
Apptenabletenable.sc---

Explore more

Back to dashboardapache CVEsbroadcom CVEsdebian CVEsbrocade_fabric_operating_system_firmware vulnerabilities