CVE-2021-28174: Mitake Smart Stock Selection

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login.

Affected products

• Mitake Smart Stock Selection: up to and including 2020-06-23

Published 2021-04-08. Last modified 2026-06-17.