CVE-2021-47794

ZesleCP 3.1.9 - Remote Code Execution (RCE) (Authenticated)

CVSS 8.7 HIGHEPSS 0.9%CWE-78

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.7EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

15 Jan 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

ZesleCP 3.1.9 contains an authenticated remote code execution vulnerability that allows attackers to create malicious FTP accounts with shell injection payloads. Attackers can exploit the FTP account creation endpoint by injecting a reverse shell command that establishes a network connection to a specified listening host.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

Zeslecp · ZesleCP

References

https://www.exploit-db.com/exploits/50233 https://www.vulncheck.com/advisories/zeslecp-remote-code-execution-rce-authenticated https://www.youtube.com/watch?v=5lTDTEBVq-0 https://zeslecp.com/