CVE-2021-27859

A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows an authenticated, remote attacker with read-only privileges to create an account with administrative privileges. Older versions of FatPipe software may also be vulnerable. This does not appear to be a CSRF vulnerability. The FatPipe advisory identifier for this vulnerability is FPSA005.

• CWE-862
• CWE-862

• https://www.fatpipeinc.com/support/cve-list.phpVendor Advisory
• https://www.zeroscience.mk/codes/fatpipe_csrf.txtThird Party Advisory
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5681.phpThird Party Advisory
• https://www.fatpipeinc.com/support/cve-list.phpVendor Advisory
• https://www.zeroscience.mk/codes/fatpipe_csrf.txtThird Party Advisory
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5681.phpThird Party Advisory

Published

Dec 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27853Layer 2 network filtering capabilities such as IPv6 RA guard…4.7
• CVE-2021-27854Layer 2 network filtering capabilities such as IPv6 RA guard…4.7
• CVE-2021-27855FatPipe WARP, IPVPN, and MPVPN software prior to versions 10…8.8
• CVE-2021-27856FatPipe WARP, IPVPN, and MPVPN software prior to versions 10…9.8
• CVE-2021-27857A missing authorization vulnerability in the web management …7.5
• CVE-2021-27858A missing authorization vulnerability in the web management …5.3
• CVE-2021-27860A vulnerability in the web management interface of FatPipe W…8.8
• CVE-2021-27861Layer 2 network filtering capabilities such as IPv6 RA guard…4.7
• CVE-2021-27862Layer 2 network filtering capabilities such as IPv6 RA guard…4.7
• CVE-2021-27876An issue was discovered in Veritas Backup Exec before 21.2. …8.1
• CVE-2021-27877An issue was discovered in Veritas Backup Exec before 21.2. …9.8
• CVE-2021-27878An issue was discovered in Veritas Backup Exec before 21.2. …8.8