QSearchQSearch

CVE-2021-38606

9.8 CRITICAL

reNgine through 0.5 relies on a predictable directory name

Published: 2021-08-12 · Last updated: 2026-06-17

Severity and scoring

CVSS
9.8 CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-330

Affected products

VendorProduct
yogeshojharengine

Description

reNgine through 0.5 relies on a predictable directory name.

Source: NVD

References

Related CVEs

Same CWE

  • CVE-2026-50009 — Netty is a network application framework for development of protocol servers and clients (4.8 MEDIUM)
  • CVE-2026-45673 — Netty is a network application framework for development of protocol servers and clients (6.8 MEDIUM)
  • CVE-2026-41701 — Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are predictable due to internal simple counter (4.4 MEDIUM)
  • CVE-2026-41838 — IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in co... (4.8 MEDIUM)
  • CVE-2026-41207 — The netty incubator codec.bhttp is a java language binary http parser (5.3 MEDIUM)