CVE-2021-30461: Voipmonitor

Critical severity, CVSS 9.8. EPSS: 36.6% chance of exploitation in the next 30 days.

A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value (which might contain PHP code) is injected into config/configuration.php.

Affected products

• Voipmonitor Voipmonitor: before 24.61 (fixed in 24.61)

Published 2021-05-29. Last modified 2026-06-17.