What is CVE-2021-41976?

CVE-2021-41976 is a medium-severity vulnerability in Tad Uploader, classified under Improper Authorization. CVSS score: 5.3/10. Published 2021-10-08.

How severe is CVE-2021-41976?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Auth bypass in Tad Uploader

CVE-2021-41976

Tad Uploader edit book list function is vulnerable to authorization bypass, thus remote attackers can use the function to amend the folder names in the book list without logging in.

Published 2021-10-08 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

EPSS exploit prediction

EPSS: 0.010 (62.3th percentile), scored 2026-09-29.

Low probability of exploitation in the next 30 days, but still tracked. 62nd percentile — 62.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.010 · newest: 0.010 · change: 0.000

Affected products

Tad Uploader — versions 0
Tad Uploader Project

Weakness classification (CWE)

References

www.twcert.org.tw/tw/cp-132-5175-a2f8d-1.html (Third Party Advisory)

Frequently asked questions

What is CVE-2021-41976?: CVE-2021-41976 is a medium-severity vulnerability in Tad Uploader, classified under Improper Authorization. CVSS score: 5.3/10. Published 2021-10-08.
How severe is CVE-2021-41976?: Medium severity. CVSS v3 base score is 5.3 out of 10.