CyberSec.Space Logo
Back to CVE Browser

CVE-2020-8260

Known Exploited (CISA KEV)HIGH
7.2
CVSS Severity Score
EPSS Score31.3020%
EPSS Percentile95.54th
PublishedOct 28, 2020
Last ModifiedDec 18, 2025

Vulnerability Description

A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution using uncontrolled gzip extraction.

Affected Platforms (CPE)

📦
Ivanti

Connect Secure

<= 9.0
📦
Ivanti

Connect Secure

= 9.1
📦
Ivanti

Connect Secure

= 9.1
📦
Ivanti

Connect Secure

= 9.1
📦
Ivanti

Connect Secure

= 9.1
📦
Ivanti

Connect Secure

= 9.1
📦
Ivanti

Connect Secure

= 9.1
📦
Ivanti

Connect Secure

= 9.1
📦
Ivanti

Connect Secure

= 9.1
📦
Ivanti

Connect Secure

= 9.1
📦
Ivanti

Connect Secure

= 9.1
📦
Ivanti

Connect Secure

= 9.1
📦
Ivanti

Connect Secure

= 9.1
📦
Ivanti

Connect Secure

= 9.1
📦
Ivanti

Connect Secure

= 9.1
📦
Ivanti

Connect Secure

= 9.1

References & Advisories

🔗 http://packetstormsecurity.com/files/160619/Pulse-Secure-VPN-Remote-Code-Execution.html
🔗 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
🔗 http://packetstormsecurity.com/files/160619/Pulse-Secure-VPN-Remote-Code-Execution.html
🔗 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8260

Related Vulnerabilities

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...

CVE-2026-121886.3

A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules...