Back to the CVE list
CVE-2021-21972 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA

Vulnerability in N/a VMware vCenter Server

CVSS score

9.8

EPSS probability

%99.9

Risk score

19.6

Published

5 y ago

OverviewPublic Exploits (11)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
Hurrrraaaa/CVE-2021-21972
GitHub

VMware vCenter Server CVE-2021-21972 (RCE) — vulnerability analysis, detection, and mitigation

Public PoCSource updated: 02.08.2026 20:44:19
G
SimoesCTT/CTT-enhanced-VMware-vCenter
GitHub

Looking at current high-impact vulnerabilities, let's use the VMware vCenter Server CVE-2021-21972 (CVSS 9.8) as our base. This is a publicly known RCE with patches available, perfect for demonstrating CTT enhancements.

Public PoCSource updated: 27.01.2026 12:30:57
G
NS-Sp4ce/CVE-2021-21972
GitHub

CVE-2021-21972 Exploit

Public PoCSource updated: 13.10.2026 19:01:34
G
pettyhacks/vSphereyeeter
GitHub

POC exploit for CVE-2021-21972

Public PoCSource updated: 02.09.2025 19:31:42
G
orangmuda/CVE-2021-21972
GitHub

CVE-2021-21972 – ᴠᴍᴡᴀʀᴇ ᴄʟɪᴇɴᴛ ᴜɴᴀᴜᴛʜᴏʀɪᴢᴇᴅ ᴄᴏᴅᴇ ɪɴᴊᴇᴄᴛɪᴏɴ (ʀᴄᴇ)

Public PoCSource updated: 14.07.2026 20:30:51
G
haidv35/CVE-2021-21972
GitHub

haidv35/CVE-2021-21972

Public PoCSource updated: 08.03.2023 02:48:17
G
murataydemir/CVE-2021-21972
GitHub

[CVE-2021-21972] VMware vSphere Client Unauthorized File Upload to Remote Code Execution (RCE)

Public PoCSource updated: 02.04.2025 14:32:12
G
Osyanina/westone-CVE-2021-21972-scanner
GitHub

A vulnerability scanner that detects CVE-2021-21972 vulnerabilities.

Public PoCSource updated: 20.03.2021 07:55:11
E
VMware vCenter Server 7.0 - Remote Code Execution (RCE) (Unauthenticated)
Exploit-DB

VMware vCenter Server 7.0 - Remote Code Execution (RCE) (Unauthenticated)

Exploit referenceSource updated: 24.06.2021 00:00:00
E
VMware vCenter Server 7.0 - Unauthenticated File Upload
Exploit-DB

VMware vCenter Server 7.0 - Unauthenticated File Upload

Exploit referenceSource updated: 01.03.2021 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21972.yaml
Nuclei

Nuclei: VMware vSphere Client (HTML5) - Remote Code Execution

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-21972"