Firetruck

CVE-2021-27860

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to upload a file to any location on the filesystem.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
IPVPNFatPipe / IPVPN>= 10.1, < 10.1.2r60p92affected
IPVPNFatPipe / IPVPN>= 10.2, < 10.2.2r44p1affected
MPVPNFatPipe / MPVPN>= 10.1, < 10.1.2r60p92affected
MPVPNFatPipe / MPVPN>= 10.2, < 10.2.2r44p1affected
WARPFatPipe / WARP>= 10.1, < 10.1.2r60p92affected
WARPFatPipe / WARP>= 10.2, < 10.2.2r44p1affected