CVE-2021-28271: Soyal 701clientsql

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag (Full) for 'Everyone'and 'Authenticated Users' group.

Affected products

• Soyal 701clientsql: from 10.0, before 10.2 (fixed in 10.2)
• Soyal 701server: up to and including 9.0.2
• Soyal 701serversql: from 10.0, before 10.2 (fixed in 10.2)

Published 2021-04-27. Last modified 2026-06-17.