onyx --cves cve-2019-11510

CVE-2019-11510

score: <0.1
cvss: —
epss: 100.0%
published: —
kev added: 2021-11-03
first seen: 2026-10-21

Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2021-11-03 Added to CISA KEV
2026-10-08 First advisory — CISA Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
2026-10-21 Tracked by Onyx
by 2026-10-21 Nuclei template Pulse Connect Secure SSL VPN Arbitrary File Read

Nuclei template

A verified check exists — you can scan for this today, and so can everyone else.

template: Pulse Connect Secure SSL VPN Arbitrary File Read
github: projectdiscovery/nuclei-templates/http/cves/2019/CVE-2019-11510.yaml ↗
severity: CRIT
first seen: 2026-10-21

$ nuclei -id CVE-2019-11510 -u https://target.example

Advisories

0 feeds this week

ADV Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data CISA · 2026-10-08

Weaknesses

CWE-22

References 1

https://nvd.nist.gov/vuln/detail/CVE-2019-11510