CVE-2021-21495: Mk-Auth

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI.

Affected products

• Mk-Auth Mk-Auth: up to and including 19.01

Published 2021-01-04. Last modified 2026-06-17.