CVE-2021-27007: Netapp Virtual Desktop Service

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

NetApp Virtual Desktop Service (VDS) when used with an HTML5 gateway is susceptible to a vulnerability which when successfully exploited could allow an unauthenticated attacker to takeover a Remote Desktop Session.

Affected products

• Netapp Virtual Desktop Service: before 6.1.21356.1837 (fixed in 6.1.21356.1837)

Published 2021-12-23. Last modified 2026-06-17.