Open Security Alliance LLPOpen Security AllianceGRC IS OUR DNA
Back to home
Security Advisories

Critical Advisory: VPN Gateway Zero-Day Exploited In-The-Wild

Active exploitation of an unauthenticated RCE in a widely deployed enterprise VPN appliance. Immediate mitigation steps and detection guidance.

OSA Research Team· Threat Intelligence & Research 5 min read

Critical Security Advisory

Severity: CRITICAL (CVSS 9.8)

Affected products

Widely deployed enterprise SSL VPN appliances on unpatched firmware.

Impact

Unauthenticated remote code execution allowing full appliance takeover and pivoting into corporate networks.

Immediate actions

  1. Apply vendor patch immediately or take the appliance offline.
  2. Rotate all credentials and session tokens.
  3. Hunt for known IOCs (indicators listed in the advisory PDF).
  4. Review privileged sessions and outbound C2 traffic for the last 30 days.
  5. Report to CERT-In within 6 hours if compromise is confirmed.
advisory cve vpn