CVE-2021-31926: Cubecoders Amp

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the applicable API endpoint (despite not having permission to make changes to the system's network configuration).

Affected products

• Cubecoders Amp: from 2.1.0, before 2.1.1.2 (fixed in 2.1.1.2)

Published 2021-04-30. Last modified 2026-06-17.