CVE-2021-43116: Alibaba Nacos

High severity, CVSS 8.8. EPSS: 7.5% chance of exploitation in the next 30 days.

An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login.

Affected products

• Alibaba Nacos: up to and including 2.0.3

Published 2022-07-05. Last modified 2026-06-17.