CVE-2021-41551: Leostream Connection Broker

Medium severity, CVSS 4.9. EPSS: 1.3% chance of exploitation in the next 30 days.

Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link.

Affected products

• Leostream Connection Broker: version 9.0.40.17 only

Published 2022-01-18. Last modified 2026-06-17.