CVE-2021-30116Vulnerability

Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on 3 Nov 2021.

Reported by 1 independent source · first reported 20 Jul 2021 by Huntress · last reported 20 Jul 2021

Last reported 5 years ago

CISA KEVAdded 3 Nov 2021
Fix due 17 Nov 2021
Used by ransomware: knownCISA KEV catalogue

EPSS85.7%
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026

What the reports say

1 report, newest first · the exact sentence from each

“Credentials leak and business logic flaw: CVE-2021-30116”

HuntressVendor20 Jul 2021
The Hunt to Find Origins of Kaseya's VSA Mass Ransomware

named in the same reports

Also named with it: CVE-2021-30117

Thanks — we review every report.

Report a wrong value