CVE-2021-27860VulnerabilityPublished 01/10/2022Updated 10/24/2026
CVE-2021-27860: FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit
Affects FatPipe WARP, IPVPN, and MPVPN softwareSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 01/10/2022
- KEV deadline
- 01/24/2022
- EPSS
- 39.7% chance of exploitation in 30 days – higher than 98% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
CVE-2021-27860 is a high-severity vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software. It allows a remote, unauthenticated attacker to upload files to arbitrary locations on the filesystem. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.