CVE-2021-34551: Fedoraproject Fedora

High severity, CVSS 8.1. EPSS: 2.8% chance of exploitation in the next 30 days.

PHPMailer before 6.5.0 on Windows allows remote code execution if lang_path is untrusted data and has a UNC pathname.

Affected products

• Fedoraproject Fedora: version 33 only; version 34 only
• PHPMailer Project PHPMailer: before 6.5.0 (fixed in 6.5.0)

Published 2021-06-16. Last modified 2026-06-17.