CVE-2021-1626: Salesforce Mule

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

MuleSoft is aware of a Remote Code Execution vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. Versions affected: Mule 4.1.x and 4.2.x runtime released before February 2, 2021.

Affected products

• Salesforce Mule: from 4.1.0, up to and including 4.2.2

Published 2021-03-26. Last modified 2026-06-17.