Vulnerability intelligence
CVE-2019-11510
Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
Ivanti Pulse Connect Secure
Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI.
CVSS Score
9.9
Critical
EPSS — Exploit Probability
—
Awaiting FIRST.org data
Exploitation
Confirmed in the wild
Used in ransomware campaigns
Remediation
unknown
Federal deadline 2022-05-03
CISA required action
Apply updates per vendor instructions. Deadline for federal agencies: 2022-05-03.
1 article across 1 outlet · first covered Oct 8, 2026 · latest Oct 8, 2026
Associated threat actors
Coverage timeline
-
China-Based Hackers Accused of Stealing Emails Across 7 Countriesthehackernews.com · Oct 8, 2026