CVE-2021-27860

A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The FatPipe advisory identifier for this vulnerability is FPSA006.

• CWE-434
• CWE-434

• https://www.fatpipeinc.com/support/cve-list.phpVendor Advisory
• https://www.ic3.gov/Media/News/2021/211117-2.pdfExploit, Mitigation, Third Party Advisory, US Government Resource
• https://www.fatpipeinc.com/support/cve-list.phpVendor Advisory
• https://www.ic3.gov/Media/News/2021/211117-2.pdfExploit, Mitigation, Third Party Advisory, US Government Resource
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27860US Government Resource

Published

Dec 8, 2021

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27854Layer 2 network filtering capabilities such as IPv6 RA guard…4.7
• CVE-2021-27855FatPipe WARP, IPVPN, and MPVPN software prior to versions 10…8.8
• CVE-2021-27856FatPipe WARP, IPVPN, and MPVPN software prior to versions 10…9.8
• CVE-2021-27857A missing authorization vulnerability in the web management …7.5
• CVE-2021-27858A missing authorization vulnerability in the web management …5.3
• CVE-2021-27859A missing authorization vulnerability in the web management …8.8
• CVE-2021-27861Layer 2 network filtering capabilities such as IPv6 RA guard…4.7
• CVE-2021-27862Layer 2 network filtering capabilities such as IPv6 RA guard…4.7
• CVE-2021-27876An issue was discovered in Veritas Backup Exec before 21.2. …8.1
• CVE-2021-27877An issue was discovered in Veritas Backup Exec before 21.2. …9.8
• CVE-2021-27878An issue was discovered in Veritas Backup Exec before 21.2. …8.8
• CVE-2021-27884Weak JSON Web Token (JWT) signing secret generation in YMFE …5.1