CVE-2026-1021

✕ Withdrawn — historical dataCRITICALNVD 9.8
9.8CVSS

Police Statistics Database System developed by Gotac has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attacker to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

CVSS v3
9.8
EchelonGraph score
Not yet assessedThis CVE record was withdrawn by its numbering authority, so there is no vulnerability to rate.
EPSS PROB
—
EPSS %ILE
—
KEV
—Not applicable: this CVE ID was withdrawn

Published

January 16, 2026

Last Modified

June 17, 2026

References (2)

Frequently asked(4)

What is CVE-2026-1021?
CVE-2026-1021 is a rejected CVE ID: its record was withdrawn on July 30, 2026 and no longer describes a vulnerability. Reason given: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
When was the CVE record for CVE-2026-1021 published?
The CVE record for CVE-2026-1021 was published on January 16, 2026. EchelonGraph's copy of the record carries a last-modified date of June 17, 2026; the record at its source may have been updated since.
What is the CVSS score of CVE-2026-1021?
CVE-2026-1021 has a CVSS v3 base score of 9.8 (NVD).
How do I remediate CVE-2026-1021?
There is nothing to remediate under CVE-2026-1021: it is a rejected (withdrawn) CVE ID and no longer describes a vulnerability.