Recorded 14 Oct 2026 at 10:19 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
VMware vCenter Server Improper Input Validation Vulnerability
VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server, which allows for remote code execution.
What it said
- CVE
- CVE-2021-21985
- Vendor
- VMware
- Product
- vCenter Server
- CISA KEV
- Listed 3 Nov 2021
- Known ransomware use
- Yes
- Federal remediation due
- 17 Nov 2021
Recorded links
Source evidence when recorded
- CISA KEV
- Complete at observationRead 14 Oct 2026 at 10:18 UTC
Coverage describes the sources at this observation. A complete read then does not establish their current position.
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.