CVE-2021-38608: Tranquil Wapt

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Incorrect Access Control in Tranquil WAPT Enterprise - before 1.8.2.7373 and before 2.0.0.9450 allows guest OS users to escalate privileges via WAPT Agent.

Affected products

• Tranquil Wapt: before 1.8.2.7373 (fixed in 1.8.2.7373); from 2.0.0.0, before 2.0.0.9450 (fixed in 2.0.0.9450)

Published 2021-08-16. Last modified 2026-06-17.