Skip to content
feed: live about
>_ 0dayNews
Vendor

Palo Alto Networks

PAN-OS and GlobalProtect vulnerabilities affecting Palo Alto Networks firewalls — perimeter devices where a single command-injection flaw can mean full network compromise.

CVEs
CVE-2024-3400
[ CRITICAL ] CVSS 10.0 kev

Palo Alto Networks PAN-OS GlobalProtect Command Injection Zero-Day

A command-injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS allows an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Exploited in the wild as a zero-day before a patch was available.

Palo Alto Networks / PAN-OS (GlobalProtect gateway/portal)
Articles
~/articles/2026-06-27-pan-os-globalprotect-command-injection-zero-day
PAN-OS GlobalProtect Zero-Day Gave Attackers Root on the Firewall Itself
Explainer
palo alto networks

PAN-OS GlobalProtect Zero-Day Gave Attackers Root on the Firewall Itself

CVE-2024-3400, a maximum-severity command-injection flaw in Palo Alto Networks' PAN-OS GlobalProtect feature, was exploited in the wild before a patch existed — handing attackers root access to the perimeter firewall.

read →