Eventi Connect Secure Vulnerability Chain Allows Unauthenticated Root Access Attackers have been observed chaining three Eventi Connect Secure vulnerabilities to gain unauthenticated root access on exposed devices. The set of issues affects a widely used remote access product, making the device itself the primary access vector. A public report on Eventi Connect Secure notes that the chain removes the need for valid credentials before a full settlement. Operationally, this compresses the penetration path from edge exposure to privileged control in one sequence. For defenders, Internet-facing VPN infrastructure remains a high-priority surface because a compromise at this layer can bypass downstream controls and provide durable access to internal environments. Open sources - closed narratives.