{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: FatPipe vulnerabilities","home_page_url":"https://patchfirst.co/vendor/fatpipe/","feed_url":"https://patchfirst.co/feed/vendor/fatpipe.json","description":"New and newly exploited FatPipe CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2021-27860#kev","url":"https://patchfirst.co/cve/CVE-2021-27860/","title":"[KEV] CVE-2021-27860: FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit","content_text":"FatPipe · WARP, IPVPN, and MPVPN software. In CISA KEV since 2022-01-10. ENISA EUVD lists it as exploited. EPSS 39.7% (higher than 98.6% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1505.003 Web Shell. Named in 1 threat report. Priority 72.8 of 100.","summary":"FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit","date_published":"2022-01-10T00:00:00.000Z","date_modified":"2026-06-17T03:45:32.000Z","tags":["kev","public-exploit","T1505.003"],"_patchfirst":{"reason":"kev","priority":72.8,"kev":{"dateAdded":"2022-01-10","ransomware":false},"epss":{"score":0.3968,"percentile":0.98617},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"FatPipe","product":"WARP, IPVPN, and MPVPN software","techniqueIds":["T1505.003"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-27856","url":"https://patchfirst.co/cve/CVE-2021-27856/","title":"CVE-2021-27856: FatPipe software administrative account with no password","content_text":"FatPipe · WARP. Not in CISA KEV. EPSS 5.5% (higher than 92.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 65.4 of 100.","summary":"FatPipe software administrative account with no password","date_published":"2021-12-15T00:00:00.000Z","date_modified":"2024-09-17T01:31:27.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":65.4,"kev":null,"epss":{"score":0.05469,"percentile":0.92743},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"FatPipe","product":"WARP","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2021-27855","url":"https://patchfirst.co/cve/CVE-2021-27855/","title":"CVE-2021-27855: FatPipe software allows privilege escalation","content_text":"FatPipe · WARP. Not in CISA KEV. EPSS 1.7% (higher than 76.6% of CVEs). CVSS 8.8 HIGH. Priority 56.5 of 100.","summary":"FatPipe software allows privilege escalation","date_published":"2021-12-15T00:00:00.000Z","date_modified":"2024-09-17T02:42:43.000Z","tags":[],"_patchfirst":{"reason":"published","priority":56.5,"kev":null,"epss":{"score":0.01657,"percentile":0.76583},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"FatPipe","product":"WARP","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}