Exposure of Warp
Web servers29
exposure score
20
sites use
1
exploited
4
critical
CVEs
33 resultsCVE-2021-27860CRITICALArbitrary file upload vulnerability in FatPipe softwareEPSS 39.7%KEVCVE-2021-27856CRITICALFatPipe software administrative account with no passwordEPSS 5.5%CVE-2021-27858MEDIUMMissing authorization vulnerability in FatPipe softwareEPSS 2.8%CVE-2021-27857HIGHFatPipe software allows unauthenticated configuration downloadEPSS 1.9%CVE-2021-27859HIGHMissing authorization vulnerability in FatPipe softwareEPSS 1.7%CVE-2021-27855HIGHFatPipe software allows privilege escalationEPSS 1.7%CVE-2026-90822CRITICALFatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerabiliEPSS 1.4%CVE-2026-48732HIGHWarp: Remote SSH cwd can lead to unauthorized remote command executionEPSS 1.4%CVE-2026-48719HIGHWarp branch selector command injection via Git branch namesEPSS 1.3%CVE-2023-2754HIGHPlaintext transmission of DNS requests in Windows 1.1.1.1 WARP clientEPSS 0.9%CVE-2026-48731HIGHWarp: Linux external editor command injectionEPSS 0.9%CVE-2026-54699HIGHWarp: OS command injection when opening terminal links from WSLEPSS 0.7%CVE-2022-4428HIGHsupport_uri validation missing in WARP client for WindowsEPSS 0.7%CVE-2026-90823CRITICALFatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /uEPSS 0.7%CVE-2022-3512MEDIUMLock WARP switch bypass using warp-cli 'add-trusted-ssid' commandEPSS 0.5%CVE-2026-48720HIGHWarp: SSH remote output can lead to local file overwrite and persistenceEPSS 0.4%CVE-2026-48704HIGHWarp Markdown notebook links may open executable local filesEPSS 0.4%CVE-2022-3320MEDIUMBypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint commandEPSS 0.4%CVE-2022-3337MEDIUMLock WARP switch bypass by removing VPN profile on iOS mobile clientEPSS 0.4%CVE-2022-3321MEDIUMLock WARP switch feature bypass on WARP mobile client for iOSEPSS 0.4%