CVE-2019-11510

ENISA EUVD: EUVD-2019-3183 ↗

Exploited in the Wild ✓ Confirmed 0-Day

Triaged: March 20, 2026 12 articles

VulnLookup ↗ NVD ↗ EUVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

94.46%

probability

This CVE has a 94.46% probability of being exploited in the next 30 days.

0% Top 100.0th percentile of all CVEs 100%

CVSS v3.0

Source: NVD

9.9

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N

Affected Products

Attack Intelligence

CWE-22 · Path Traversal CWE-664 · Improper Control of a Resource Through its Lifetime CWE-706 · Use of Incorrectly-Resolved Name or Reference

Exploits & PoC

projectzeroindia/CVE-2019-11510

Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)

363

BishopFox/pwn-pulse

Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)

134

jas502n/CVE-2019-11510-1

SSL VPN Rce

imjdl/CVE-2019-11510-poc

Pulse Secure SSL VPN pre-auth file reading

cisagov/check-your-pulse

This utility can help determine if indicators of compromise (IOCs) exist in the log files of a Pulse Secure VPN Appliance for CVE-2019-11510.

aqhmal/pulsexploit

Automated script for Pulse Secure SSL VPN exploit (CVE-2019-11510) using hosts retrieved from Shodan API. You must have a Shodan account to use this s

es0/CVE-2019-11510_poc

PoC for CVE-2019-11510 | Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure vulnerability

andripwn/pulse-exploit

Pulse Secure SSL VPN exploit (CVE-2019-11510) using hosts retrieved from Shodan API.

8 repos — triés par ⭐ Rechercher sur GitHub ↗

Part 2: An In-Depth Look at the Latest Vulnerability Threat Landscape (Attackers’ Edition)

Qualys Jul 18, 2023

Qualys Top 20 Most Exploited Vulnerabilities

Qualys Sep 04, 2023

Pulse Secure VPN zero-day used to hack defense firms, govt orgs

BleepingComputer Apr 20, 2021

Inside LockBit: Defense Lessons from the Leaked LockBit Negotiations

Qualys May 08, 2025

NSA Alert: Topmost CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors

Qualys Oct 07, 2022

SonicWall firewall maker hacked using zero-day in its VPN device

BleepingComputer Jan 23, 2021

Qualys Response to CISA Alert: Binding Operational Directive 22-01

Qualys Nov 09, 2021

Solorigate/Sunburst : Theft of Cybersecurity Tools | FireEye Breach

Qualys Dec 10, 2020

Top 12 Security Flaws Russian Spy Hackers Are Exploiting in the Wild

TheHackerNews

Top 30 Critical Security Vulnerabilities Most Exploited by Hackers

TheHackerNews

CISA Warns Patched Pulse Secure VPNs Could Still Expose Organizations to Hackers

TheHackerNews

CISA Alert: Top Routinely Exploited Vulnerabilities

Qualys Jul 29, 2021

Signal Intelligence

Confidenceⓘ

75%

EPSS 94.46%

CVSS v3.0 9.9

Mentions 12

Last Seen May 08, 2025

CNA Information

Analyst Note

CVE-2019-11510 is identified as a Pulse Secure VPN zero-day in BleepingComputer reporting active exploitation against defense firms and government organizations. The 2019 publication year combined with explicit zero-day designation and documented in-the-wild attacks meets zero-day criteria, though specific patch timing details are unavailable.