Threat Advisory: Pulse Secure Connect Coverage

Summary: Pulse Secure disclosed a critical authentication bypass in Pulse Connect Secure, tracked as CVE-2021-22893, that lets an unauthenticated user perform remote arbitrary file execution on the gateway, and said the flaw has been exploited in the wild. The company has not yet patched CVE-2021-22893, with a patch expected in May, while earlier flaws CVE-2019-11510, CVE-2020-8243 and CVE-2020-8260 are fixed in released patches.
Why it matters: The exploited flaw has no patch until May, and the same Pulse Connect attacks also leveraged CVE-2019-11510, a vulnerability the NSA advisory says Russian Foreign Intelligence Services (SVR) exploited in the wild - so an internet-facing VPN gateway is the exposed stake while you wait.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2019-11510 CVE-2020-8243 CVE-2020-8260 CVE-2021-22893 CVE-2026-20127
Related: Threat Advisory: NSA SVR Advisory Coverage Cyber Risks ·
CVE-2026-20127: Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability Known Exploited Vulnerabilities · Feb 25, 2026
CVE-2019-11510: Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021