CVE-2021-27236: Mutare Voice

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. getfile.asp allows Unauthenticated Local File Inclusion, which can be leveraged to achieve Remote Code Execution.

Affected products

• Mutare Voice: from 3.0.0, before 3.3.8 (fixed in 3.3.8)

Published 2021-02-16. Last modified 2026-06-17.