← Global Threat Landscape

CVE-2021-27860

CWE-434

Critical

103.2

RPS

Description

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The FatPipe advisory identifier for this vulnerability is FPSA006.

Source: NVD

Signals

CVSS
9.8
Critical · v3.1
EPSS
39.82%
Probability of exploitation in the next 30 days (FIRST)
CISA KEV
In CISA KEV since Jan 2022
Fix commit
No known fix commit
Sources: MoreFixes, FreshFixes
Weakness
CWE-434
Published
8 Dec 2021
Last modified 24 Oct 2025

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2021-27860

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 8 Oct 2026, 05:16 UK time