CVE-2021-26912: Netmotionsoftware Netmotion Mobility

High severity, CVSS 8.1. EPSS: 41% chance of exploitation in the next 30 days.

NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in SupportRpcServlet.

Affected products

• Netmotionsoftware Netmotion Mobility: before 11.73 (fixed in 11.73); from 12.0, before 12.02 (fixed in 12.02)

Published 2021-02-08. Last modified 2026-06-17.