ACTIVELY EXPLOITED
CVE-2021-39144: XStream Remote Code Execution Vulnerability
| Vendor | XStream |
|---|---|
| Product | XStream |
| Actively exploited | Yes |
| Added to CISA KEV | 10 Mar 2023 |
| CISA federal deadline | 31 Mar 2023 |
| Weakness (CWE) | CWE-502, CWE-94 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affect multiple products, including but not limited to VMware Cloud Foundation.
SOURCES
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.