CVE-2021-27101

Accellion FTA's SQL injection vulnerability was actively exploited, leading to data breaches and ransomware attacks affecting DIB organizations using the product.

A SQL injection flaw in Accellion FTA allowed attackers to extract data via a manipulated host header, resulting in significant data breaches and subsequent ransomware attacks. DIB organizations utilizing FTA face compliance risks (CMMC, NIST 800-171) and potential financial penalties; immediate remediation and incident response are critical.

Shame score — The vulnerability's exploitation in ransomware attacks and the widespread impact on DIB organizations demonstrate a significant failure in secure coding practices and risk management.