What happened
Remote code execution in VMware ESXi with available proof-of-concept exploit.
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
SploitusRemote code execution in VMware ESXi with available proof-of-concept exploit.KitPloit2026-08-26T01:32:04Candidatekitploit.comRemote code execution in VMware ESXi with available proof-of-concept exploit.ru2026-08-26T01:32:04CandidatePoC-in-GitHub · Shadow0ps/CVE-2021-21974POC for CVE-2021-21974 VMWare ESXi RCE Exploit★ 188Shadow0ps2021-05-25CandidatePoC-in-GitHub · n2x4/Feb2023-CVE-2021-21974-OSINTAnalysis of the ransom demands from Shodan results★ 2n2x42023-02-04CandidatePoC-in-GitHub · CYBERTHREATANALYSIS/ESXi-Ransomware-Scanner-miESXi EZ - A custom scanner that takes list of IPs either in JSON, CSV or individually and checks for infection CVE-2021-21974★ 2CYBERTHREATANALYSIS2023-02-08CandidatePoC-in-GitHub · hateme021202/cve-2021-21974Nmap NSE script for cve-2021-21974★ 0hateme0212022023-10-19CandidatePoC-in-GitHub · mercylessghost/CVE-2021-21974★ 0mercylessghost2025-01-10CandidatePoC-in-GitHub · abirasecurity/CVE-2021-21974_vuln_dectectionCVE-2021-21974 Vulnerability Detection Tool Safe PoC that identifies vulnerable SLP implementations without exploitation★ 0abirasecurity2025-09-04CandidatePoC-in-GitHub · Aiyakami/CVE-2021-21974自研针对ESXI 堆栈溢出的CVE-2021-21974 POC，只支持项目给出的的目标和环境，用于学习和研究★ 6Aiyakami2026-07-08CandidateSource timeline
Discovered through SploitusView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.