CVE-2021-36231: UNIT4 Mik.starlight

High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days.

Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remote attackers to execute operating system commands by crafting serialized objects.

Affected products

• UNIT4 Mik.starlight: version 7.9.5.24363 only

Published 2021-08-31. Last modified 2026-06-17.