Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability

Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI. CISA required action: Apply updates per vendor instructions.

Pulse Connect Secure CVE-2019-11510

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-11510

Pulse Connect Secure

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-11510
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3692 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:39:43 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Ivanti Pulse Connect Secure Command Injection Vulnerability

Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code execution via Windows File Resource Profiles. CISA required action: Apply updates per vendor instructions.

Pulse Connect Secure CVE-2021-22899

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-22899

Pulse Connect Secure

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-22899
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3691 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:39:42 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Ivanti Pulse Connect Secure Code Execution Vulnerability

Pulse Connect Secure contains an unspecified vulnerability that allows an authenticated attacker to perform code execution using uncontrolled gzip extraction. CISA required action: Apply updates per vendor instructions.

Pulse Connect Secure CVE-2020-8260

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-8260

Pulse Connect Secure

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-8260
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3690 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:39:42 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability

Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execute code as the root user via maliciously crafted meeting room. CISA required action: Apply updates per vendor instructions.

Pulse Connect Secure CVE-2021-22894

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-22894

Pulse Connect Secure

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-22894
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3689 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:39:41 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability

Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface. CISA required action: Apply updates per vendor instructions.

Pulse Connect Secure CVE-2021-22900

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-22900

Pulse Connect Secure

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-22900
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3688 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:39:41 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Ivanti Pulse Connect Secure Code Execution Vulnerability

Ivanti Pulse Connect Secure contains an unspecified vulnerability in the admin web interface that could allow an authenticated attacker to upload a custom template to perform code execution. CISA required action: Apply updates per vendor instructions.

Pulse Connect Secure CVE-2020-8243

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-8243

Pulse Connect Secure

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-8243
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3687 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:39:40 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Ivanti Pulse Connect Secure Use-After-Free Vulnerability

Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services. CISA required action: Apply updates per vendor instructions.

Pulse Connect Secure CVE-2021-22893

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-22893

Pulse Connect Secure

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-22893
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3686 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:39:39 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Pulse Connect Secure Code Injection Vulnerability

A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface. CISA required action: Apply updates per vendor instructions.

Pulse Connect Secure CVE-2020-8218

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-8218

Pulse Connect Secure

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-8218
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2770 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:24:02 GMT
Publisher date: Mon, 07 Mar 2022 00:00:00 GMT

Read the original announcement