16 matches found
CVE-2026-0309
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...
EUVD-2026-75255
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...
CVE-2026-0309
CVE-2026-0309 is currently a reserved candidate with no publicly available technical details. The vulnerability has not yet been announced. Monitor for updates once the assigning organization publicizes the entry.
CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...
CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...
PT-2026-89277
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...
CVE-2026-0309: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...
PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...
Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x / 12.2.x Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, 12.1.x, or 12.2.x. It is, therefore, affected by a vulnerability. A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator t...
Luna HSM Access Disclosure
The vulnerability of the Luna HSM encryption hardware system is due to problems with the implementation of cryptography. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to user data...
CVE-2015-5464
The Gemalto SafeNet Luna HSM allows remote authenticated users to bypass intended key-export restrictions by leveraging 1 crypto-user or 2 crypto-officer access to an HSM partition...
Design/Logic Flaw
The Gemalto SafeNet Luna HSM allows remote authenticated users to bypass intended key-export restrictions by leveraging 1 crypto-user or 2 crypto-officer access to an HSM partition...
CVE-2015-5464
The Gemalto SafeNet Luna HSM allows remote authenticated users to bypass intended key-export restrictions by leveraging 1 crypto-user or 2 crypto-officer access to an HSM partition...
CVE-2015-5464
The CVE-2015-5464 entry concerns Gemalto SafeNet Luna HSM. The documented vulnerability allows remote authenticated users to bypass key-export restrictions by leveraging either crypto-user or crypto-officer access to an HSM partition. The core issue is a bypass of export controls within the HSM, ...
PT-2015-1516
Name of the Vulnerable Software and Affected Versions Gemalto SafeNet Luna HSM affected versions not specified Description The issue is related to problems with the use of cryptography in the hardware encryption system. It may allow a remote attacker to bypass intended key-export restrictions by...
CVE-2015-5464: Improper Access Control
The Gemalto SafeNet Luna HSM allows remote authenticated users to bypass intended key-export restrictions by leveraging 1 crypto-user or 2 crypto-officer access to an HSM partition...