Lucene search
+L

CVE-2021-26700

🗓️ 25 Feb 2021 23:02:00Reported by microsoftType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 125 Views🌐 WEB

Visual Studio Code npm-script Extension RCE Vulnerabilit

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for CVE-2021-26700
14 Feb 202114:01
githubexploit
githubexploit
GithubExploit
Exploit for CVE-2021-26700
16 Mar 202314:49
githubexploit
attackerkb
ATTACKERKB
CVE-2021-26700
25 Feb 202123:15
attackerkb
circl
Circl
CVE-2021-26700
17 Feb 202112:03
circl
cnnvd
CNNVD
Microsoft Visual Studio Code npm-script plugin security vulnerability
9 Feb 202100:00
cnnvd
cvelist
Cvelist
CVE-2021-26700 Visual Studio Code npm-script Extension Remote Code Execution Vulnerability
25 Feb 202123:02
cvelist
github
Github Security Blog
Remote code execution in vscode-npm-script
24 May 202217:43
github
kitploit
Kitploit
CVE-2021-26700
5 Sep 202603:18
kitploit
kitploit
Kitploit
CVE-2021-26700
4 Sep 202615:04
kitploit
kaspersky
Kaspersky
KLA12073 Multiple vulnerabilities in Microsoft Developer Tools
9 Feb 202100:00
kaspersky
Rows per page
NVD
Vulners
Node
microsoftnpmRange<0.3.15
[
  {
    "vendor": "Microsoft",
    "product": "Visual Studio Code - npm-script Extension",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_code_npm-script_extension:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "0.1.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
deployagent.ps1path192.168.1.29:8888DNS tunneling C2 server endpoint used during exploitation
calc.batpath192.168.1.29:8888DNS tunneling C2 server endpoint used during exploitation

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 03:43Current
7.8High risk
Vulners AI Score7.8
CVSS 26.8
CVSS 3.17.8
EPSS0.06003
125