CVE-2019-11539

CVE-2019-11539 is a critical command injection vulnerability affecting Pulse Connect Secure and Pulse Policy Secure products, allowing an authenticated attacker to execute arbitrary commands via the admin web interface. With a CVSS score of 7.2 (High), it presents a significant risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. This vulnerability is actively exploited in the wild, including by ransomware campaigns, and has publicly available exploit code in Metasploit and ExploitDB. Its high EPSS score and extensive community discussion and media coverage underscore its widespread recognition and threat.