What’s Vulnerable › Vulnerabilities

CVE-2016-4786

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-05-26 · updated 2026-06-17

Description

Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r3, 8.0 before 8.0r11, and 7.4 before 7.4r13.4 allow remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.

Affected products

• Ivanti Connect Secure (Pulse Secure): 8.1, 8.2, 8.0
• Ivanti Connect Secure (Pulse Secure): 8.1r1.0, 7.4

References

• http://www.securitytracker.com/id/1035932
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40206
• http://www.securitytracker.com/id/1035932
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40206

Get alerted when CVE-2016-4786 or the next vulnerability affects your stack