CVE-2021-22894VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2021-22894: Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability

Affects Ivanti Pulse Connect SecureSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 41.3% chance of exploitation in 30 days – higher than 98% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

Description

CVE-2021-22894 is a buffer overflow vulnerability in Ivanti Pulse Connect Secure Collaboration Suite that allows remote authenticated users to execute code with root privileges by exploiting a specially crafted meeting room. This vulnerability has been exploited in the wild and is considered high severity.

Summary

Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerability (CWE-94) that permits remote authenticated attackers to execute arbitrary code as the root user by crafting malicious meeting room data. The vulnerability has been observed to be exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.

Impact

Successful exploitation enables remote authenticated users to execute arbitrary code with root privileges, potentially leading to full system compromise. The presence of known in-the-wild exploitation increases the urgency and risk associated with this vulnerability.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is applied, restrict access to the affected service to trusted users and monitor for suspicious activity related to meeting room creation or modification.

Weaknesses

CWE-94Code Injection (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 08:56:38 UTC

Weaknesses

References

Related threats