CVE-2021-26558: Apache Shardingsphere-UI

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI versions prior to 5.0.0.

Affected products

• Apache Shardingsphere-UI: from 4.1.1, before 5.0.0 (fixed in 5.0.0)

Published 2021-11-11. Last modified 2026-06-17.