vulnerability
Ivanti Pulse Connect Secure: Security Advisory May 2024
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:M/C:C/I:C/A:C) | May 31, 2024 | Jun 10, 2024 | Feb 23, 2026 |
Severity
8
CVSS
(AV:N/AC:L/Au:M/C:C/I:C/A:C)
Published
May 31, 2024
Added
Jun 10, 2024
Modified
Feb 23, 2026
Description
An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated, privileged user to execute arbitrary commands as SYSTEM.
Solutions
pulse-secure-pulse-connect-secure-upgrade-22_0r0pulse-secure-pulse-connect-secure-upgrade-22_7r1pulse-secure-pulse-connect-secure-upgrade-9_0r0
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.