CVE-2019-11508

CVE-2019-11508 is a directory traversal vulnerability affecting Pulse Secure Pulse Connect Secure (PCS) appliances across multiple versions. An authenticated attacker, with access to the admin web interface, can leverage this flaw to execute arbitrary code on the appliance. Rated with a CVSS score of 7.2 (HIGH), this vulnerability presents a significant risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.