PAN-OS and GlobalProtect vulnerabilities affecting Palo Alto Networks firewalls — perimeter devices where a single command-injection flaw can mean full network compromise. Combined article + CVE feed for the Palo Alto Networks beat.https://0daynews.com/en-ushttps://0daynews.com/cve/cve-2017-15944/https://0daynews.com/cve/cve-2017-15944/Palo Alto Networks PAN-OS contains multiple, unspecified vulnerabilities which can allow for remote code execution when chained.Fri, 14 Aug 2026 00:00:00 GMTPalo Alto Networkscriticalcvehttps://0daynews.com/cve/cve-2019-1579/https://0daynews.com/cve/cve-2019-1579/Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.Fri, 14 Aug 2026 00:00:00 GMTPalo Alto Networkshighcvehttps://0daynews.com/cve/cve-2020-2021/https://0daynews.com/cve/cve-2020-2021/Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication.Fri, 14 Aug 2026 00:00:00 GMTPalo Alto Networkscriticalcvehttps://0daynews.com/cve/cve-2022-0028/https://0daynews.com/cve/cve-2022-0028/A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks.Fri, 14 Aug 2026 00:00:00 GMTPalo Alto Networkshighcvehttps://0daynews.com/cve/cve-2024-0012/https://0daynews.com/cve/cve-2024-0012/Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products, including firewalls and VPN concentrators.Fri, 14 Aug 2026 00:00:00 GMTPalo Alto Networkscriticalcvehttps://0daynews.com/cve/cve-2024-3393/https://0daynews.com/cve/cve-2024-3393/Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.Fri, 14 Aug 2026 00:00:00 GMTPalo Alto Networkshighcvehttps://0daynews.com/cve/cve-2024-3400/https://0daynews.com/cve/cve-2024-3400/A command-injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS allows an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Exploited in the wild as a zero-day before a patch was available.Fri, 14 Aug 2026 00:00:00 GMTPalo Alto Networkscriticalcvehttps://0daynews.com/cve/cve-2024-5910/https://0daynews.com/cve/cve-2024-5910/Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data.Fri, 14 Aug 2026 00:00:00 GMTPalo Alto Networkscriticalcvehttps://0daynews.com/cve/cve-2024-9463/https://0daynews.com/cve/cve-2024-9463/Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.Fri, 14 Aug 2026 00:00:00 GMTPalo Alto Networkshighcvehttps://0daynews.com/cve/cve-2024-9465/https://0daynews.com/cve/cve-2024-9465/Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.Fri, 14 Aug 2026 00:00:00 GMTPalo Alto Networkscriticalcvehttps://0daynews.com/cve/cve-2024-9474/https://0daynews.com/cve/cve-2024-9474/Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators.Fri, 14 Aug 2026 00:00:00 GMTPalo Alto Networkshighcvehttps://0daynews.com/cve/cve-2025-0108/https://0daynews.com/cve/cve-2025-0108/Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web interface. This vulnerability allows an unauthenticated attacker with network access to the management web interface to bypass the authentication normally required and invoke certain PHP scripts.Fri, 14 Aug 2026 00:00:00 GMTPalo Alto Networkscriticalcvehttps://0daynews.com/cve/cve-2025-0111/https://0daynews.com/cve/cve-2025-0111/Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user.Fri, 14 Aug 2026 00:00:00 GMTPalo Alto Networksmediumcvehttps://0daynews.com/cve/cve-2026-0257/https://0daynews.com/cve/cve-2026-0257/PAN-OS GlobalProtect portal and gateway authentication bypass allowing an unauthorized VPN connection under a specific authentication-override-cookie and certificate configuration. Actively exploited by Qilin ransomware.Fri, 14 Aug 2026 00:00:00 GMTPalo Alto Networkscriticalcvehttps://0daynews.com/cve/cve-2026-0300/https://0daynews.com/cve/cve-2026-0300/Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.Fri, 14 Aug 2026 00:00:00 GMTPalo Alto Networkscriticalcvehttps://0daynews.com/articles/2026-07-21-qilin-pan-os-cve-2026-0257-globalprotect-arctic-wolf-june-exploitation/https://0daynews.com/articles/2026-07-21-qilin-pan-os-cve-2026-0257-globalprotect-arctic-wolf-june-exploitation/Arctic Wolf documents Qilin ransomware breaching networks through a two-month-old PAN-OS GlobalProtect authentication bypass, and assesses with moderate confidence that intrusions are ongoing.Tue, 21 Jul 2026 12:00:00 GMTPalo Alto Networksarticlehttps://0daynews.com/articles/2026-06-27-pan-os-globalprotect-command-injection-zero-day/https://0daynews.com/articles/2026-06-27-pan-os-globalprotect-command-injection-zero-day/CVE-2024-3400, a maximum-severity command-injection flaw in Palo Alto Networks' PAN-OS GlobalProtect feature, was exploited in the wild before a patch existed — handing attackers root access to the perimeter firewall.Sat, 27 Jun 2026 13:00:00 GMTPalo Alto Networksarticle