CVE-2024-0012

CVE-2024-0012 CVE-2024-0012 an authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit...

CVE-2026-0257

Forge a GlobalProtect auth override cookie using the public key from TLS CVE-2026-0257 A proof-of-concept script to test a target PAN-OS GlobalProtect portal or gateway for CVE-2026-0257. The script will attempt to forge a valid authentication override cookie by iterating over the certificate cha...

CVE-2024-3400-pot

CVE-2024-3400-pot CVE-2024-3400 Palo Alto PAN-OS 명령 삽입 취약점을 위한 간단한 허니팟입니다. 특징 /global-protect/login.esp GlobalProtect 포털의 로그인 페이지 방문 시 시뮬레이션 HTTP 요청 POST /ssl-vpn/hipreport.esp 및 Cookie: SESSID=/../../../var/appweb/sslvpndocs/global-protect/portal/images/; 시뮬레이션 쿠키에서 파일명 추출 있는 경우 POST 요청의 내용을 파일로...

cve-2025-0133

CVE-2025-0133 Scanner Palo Alto PAN-OS GlobalProtect Reflected XSS vulnerability scanner. Features Single target & mass scanning Multi-threaded configurable Proxy support Burp, ZAP, etc. Colored output with summary Save vulnerable URLs to file Installation Via pip from GitHub root@kitploit: pip...

CVE-2024-3400

CVE-2024-3400 Author: wa6n3r | GitHub | Web Описание Инструмент для автоматизированной эксплуатации уязвимости CVE-2024-3400 в устройствах Palo Alto Networks PAN-OS. Поддерживает многопоточное сканирование, автоматическую загрузку артефактов и детальное логирование. !!!Важно : Используйте только ...

cve-2025-4615

CVE-2025-4615 — Technical Analysis & Proof of Concept Vulnerability: Improper Neutralization of Input in PAN-OS Management Web Interface Vendor Advisory: https://security.paloaltonetworks.com/CVE-2025-4615 CVSS 4.0: 6.9 MEDIUM — Integrity HIGH, Availability HIGH CWE: CWE-83 Improper Neutralizatio...

CVE-2024-3400

PAN-OS CVE-2024-3400 Check Overview FOR INTERNAL USE ONLY This script checks for evidence of the CVE-2024-3400 PAN-OS exploit on Palo Alto Networks firewalls. CVE: https://security.paloaltonetworks.com/CVE-2024-3400 IOCs: https://otx.alienvault.com/pulse/66198c3b58d2dd2ad4043bc6/ Requirements...

CVE-2021-3064

CVE-2021-3064: Pan-OS Remote Buffer Overflow + HTTP Smuggling Exploit This exploit uses an HTTP Smuggling vuln to deliver a payload to an otherwise inaccessible endpoint on Pan-OS firewalls; the endpoint is vulnerable to an overflow that can be exploited to run arbitrary code as root on the...

PAN-OS Management Interface - Path Confusion to Authentication Bypass

A vulnerability in PAN-OS management interface allows authentication bypass through path confusion between Nginx and Apache handlers.The issue occurs due to differences in path processing between Nginx and Apache, where double URL encoding combined with directory traversal can bypass authenticati...

PAN-OS Management Web Interface - Authentication Bypass

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege...

CVE-2026-0301

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability...

CVE-2026-0301

CVE-2026-0301 is an information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS , allowing an unauthenticated user with network access to obtain sensitive information. Panorama is explicitly not impacted. Affected versions are 10.2.x prior to 10.2.8 and 11.1.x p...

EUVD-2026-57714

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability...

CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability...

CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability...

CVE-2026-0301

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability...

PT-2026-71383

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS affected versions not specified Description An information disclosure issue exists within the URL Filtering feature of the software. This flaw allows an unauthenticated user with network access to retrieve sensitive...

Palo Alto Networks PAN-OS 10.2.x < 10.2.8 / 11.1.x < 11.1.16-h1 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.2.x prior to 10.2.8 or 11.1.x prior to 11.1.16-h1. It is, therefore, affected by a vulnerability. An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS software enables an...

CVE-2026-0285

A server-side request forgery SSRF vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services. The security risk posed by this issue is minimize...

CVE-2026-0282

A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to delete files from a temporary directory. The security risk posed by this issue is minimized by restricting access to the management web...