CVE-2021-26705

CVE-2021-26705 is a critical authentication bypass vulnerability affecting SquareBox CatDV Server versions through 9.2. An unauthenticated attacker can invoke sensitive RMI methods to obtain valid authentication tokens, enabling them to perform administrative tasks, including disclosing password hashes. With a CVSS score of 9.1, this vulnerability is easily exploitable over the network with no user interaction, leading to high impact on confidentiality and integrity. While no public exploits or active exploitation have been observed, and community discussion is minimal, the potential for severe compromise remains.