CVE-2026-0257

TLS 공개 키를 사용하여 GlobalProtect 인증 재정의 쿠키 위조 CVE-2026-0257 대상 PAN-OS GlobalProtect 포털 또는 게이트웨이가 CVE-2026-0257에 취약한지 테스트하는 개념 증명PoC 스크립트입니다. 이 스크립트는 HTTPS 서비스가 사용하는 인증서 체인을 순회하면서 체인에 있는 모든 공개 키에 대해 새 인증 재정의 쿠키를 위조하고, 해당 쿠키가 유효한지 GlobalProtect 대상에서 테스트하여 유효한 인증 재정의 쿠키를 위조하려고 시도합니다. 성공적으로 위조된 쿠키는...

CVE-2024-3400-pot

CVE-2024-3400-pot CVE-2024-3400 Palo Alto PAN-OS 명령 삽입 취약점을 위한 간단한 허니팟입니다. 특징 /global-protect/login.esp GlobalProtect 포털의 로그인 페이지 방문 시 시뮬레이션 HTTP 요청 POST /ssl-vpn/hipreport.esp 및 Cookie: SESSID=/../../../var/appweb/sslvpndocs/global-protect/portal/images/; 시뮬레이션 쿠키에서 파일명 추출 있는 경우 POST 요청의 내용을 파일로...

cve-2025-0133

CVE-2025-0133 Scanner Palo Alto PAN-OS GlobalProtect Reflected XSS vulnerability scanner. Features Single target & mass scanning Multi-threaded configurable Proxy support Burp, ZAP, etc. Colored output with summary Save vulnerable URLs to file Installation Via pip from GitHub root@kitploit: pip...

CVE-2024-3400

CVE-2024-3400 Author: wa6n3r | GitHub | Web Описание Инструмент для автоматизированной эксплуатации уязвимости CVE-2024-3400 в устройствах Palo Alto Networks PAN-OS. Поддерживает многопоточное сканирование, автоматическую загрузку артефактов и детальное логирование. !!!Важно : Используйте только ...

cve-2025-4615

CVE-2025-4615 — 기술 분석 및 개념 증명 Proof of Concept 취약점: PAN-OS 관리 웹 인터페이스의 입력 부적절한 중화 Improper Neutralization of Input 벤더 권고: https://security.paloaltonetworks.com/CVE-2025-4615 CVSS 4.0: 6.9 중간 — 무결성 높음, 가용성 높음 CWE: CWE-83 웹 페이지 속성의 스크립트 부적절한 중화 CAPEC: CAPEC-165 파일 조작 크레딧: Visa Inc. 분석 날짜: 2026-03-2...

CVE-2024-3400

PAN-OS CVE-2024-3400 チェック 概要 内部使用専用 このスクリプトは、Palo Alto Networks ファイアウォール上で CVE-2024-3400 PAN-OS エクスプロイトの痕跡をチェックします。 CVE: https://security.paloaltonetworks.com/CVE-2024-3400 IOCs: https://otx.alienvault.com/pulse/66198c3b58d2dd2ad4043bc6/ 要件 Python 3.6+ netmiko ライブラリ tqdm ライブラリ インストール 1...

CVE-2021-3064

CVE-2021-3064: Pan-OS Remote Buffer Overflow + HTTP Smuggling Exploit This exploit uses an HTTP Smuggling vuln to deliver a payload to an otherwise inaccessible endpoint on Pan-OS firewalls; the endpoint is vulnerable to an overflow that can be exploited to run arbitrary code as root on the...

cve-2024-3400-panos_rce_reproduction

CVE-2024-3400: Palo Alto PAN-OS GlobalProtect 명령 주입 RCE CVSS 10.0 치명적 | CWE-78: OS 명령 주입 | 실제 환경에서 대규모 악용됨 개요 CVE-2024-3400은 Palo Alto Networks PAN-OS GlobalProtect 포털 및 게이트웨이 인터페이스의 사전 인증 명령 주입 취약점입니다. 이 취약점으로 인해 인증되지 않은 공격자는 영향을 받는 방화벽에서 루트 권한으로 임의 명령을 실행할 수 있습니다. 발견자: Volexity 2024년 4월 배후 위협...

PAN-OS Management Interface - Path Confusion to Authentication Bypass

A vulnerability in PAN-OS management interface allows authentication bypass through path confusion between Nginx and Apache handlers.The issue occurs due to differences in path processing between Nginx and Apache, where double URL encoding combined with directory traversal can bypass authenticati...

PAN-OS Management Web Interface - Authentication Bypass

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege...

CVE-2026-0301

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability...

CVE-2026-0301

CVE-2026-0301 is an information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS , allowing an unauthenticated user with network access to obtain sensitive information. Panorama is explicitly not impacted. Affected versions are 10.2.x prior to 10.2.8 and 11.1.x p...

EUVD-2026-57714

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability...

CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability...

CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability...

CVE-2026-0301

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability...

PT-2026-71383

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS affected versions not specified Description An information disclosure issue exists within the URL Filtering feature of the software. This flaw allows an unauthenticated user with network access to retrieve sensitive...

Palo Alto Networks PAN-OS 10.2.x < 10.2.8 / 11.1.x < 11.1.16-h1 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.2.x prior to 10.2.8 or 11.1.x prior to 11.1.16-h1. It is, therefore, affected by a vulnerability. An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS software enables an...

CVE-2026-0285

A server-side request forgery SSRF vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services. The security risk posed by this issue is minimize...

CVE-2026-0282

A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to delete files from a temporary directory. The security risk posed by this issue is minimized by restricting access to the management web...