Vulnerabilities in Multiple VPN Applications

The Cybersecurity and Infrastructure Security Agency (CISA) is aware of vulnerabilities affecting multiple Virtual Private Network (VPN) applications. A remote attacker could exploit these vulnerabilities to take control of an affected system. CISA encourages administrators to review the following security advisories and apply the necessary updates:

• Palo Alto Security Advisory PAN-SA-2019-0020
• FortiGuard Security Advisory  FG-IR-18-384
• Pulse Secure Security Advisory SA44101