CVE-2021-37394: Rpcms

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration.

Affected products

• Rpcms Rpcms: up to and including 1.8

Published 2021-07-26. Last modified 2026-06-17.