CVE-2021-38289

An issue has been discovered in Novastar-VNNOX-iCare Novaicare 7.16.0 that gives attacker privilege escalation and allows attackers to view corporate information and SMTP server details, delete users, view roles, and other unspecified impacts. NOTE: As of April 2026, the vendor has officially...

CVE-2021-38289

CVE-2021-38289 affects Novastar-VNNOX-iCare Novaicare 7.16.0. The issue enables privilege escalation, allowing an attacker to view corporate information and SMTP server details, delete users, and view roles, among other impacts. Root cause and exact exploit path are not detailed in the provided d...