CVE-2021-45913: Controlup Agent

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

A hardcoded key in ControlUp Real-Time Agent (cuAgent.exe) before 8.2.5 may allow a potential attacker to run OS commands via a WCF channel.

Affected products

• Controlup Controlup Agent: before 8.2.5 (fixed in 8.2.5)

Published 2022-01-04. Last modified 2026-06-17.