CVE-2021-42557: Jeedom

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials.

Affected products

• Jeedom Jeedom: up to and including 4.1.19

Published 2021-11-01. Last modified 2026-06-17.