CVE-2024-55591-POC

--port 443 --ssl 然后使用提示符： FortiOS get system status FortiOS exit 重置管理员密码： python3 poc.py --host --port 443 --ssl \ --reset-user Admin2 --new-pass Forti2024! 开发者 Telegram：@chernyzhizn 免责声明： 此工具仅供教育和授权测试目的使用。 4fe5de8 Add full PoC and README for CVE-2024-55591 by @chernyzhizn...

CVE-2024-55591-POC

ScaryByte R&D PoC for CVE-2024-55591 一款全面的 一体化 Python 概念验证脚本，用于发现并利用特定 Fortinet 设备中的严重认证绕过漏洞（CVE-2024-55591）。该脚本： 1. 自动安装缺失的依赖项 2. 可选地使用nmap 扫描目标主机上的开放端口 3. 进行预检 ，确保服务为 Fortinet 设备且存在漏洞 4. 利用 WebSocket 接口 劫持类似 Telnet 的 CLI 会话 5. 在漏洞利用后运行一个或多个命令 6. 根据Fortinet PSIRT FG-IR-24-535 中已知的受影响版本范围检查设备版本 目...

SECURITY-3314-3315

= SECURITY-3314/SECURITY-3315 缓解措施 此仓库记录了防止在受影响实例上利用 SECURITY-3314 和 SECURITY-3315 的缓解措施。 == 概述 需要禁用对 CLI 的访问。 必须采取以下两个步骤： 移除 CLI HTTP 端点 禁用 SSH 端口（https://plugins.jenkins.io/sshd/SSH Server Plugin） NOTE 基于 remoting 的 CLI 已在 Jenkins 中移除...

CVE-2024-23897

CVE-2024-23897 Jenkins RCE 任意文件读取 CVE-2024-23897 使用方法: python poc.py http://127.0.0.1:8888/ /etc/passwd 更新: 更新至 Jenkins 2.442, LTS 2.426.3 修复: 如果你无法更新到最新版本，请禁用对CLI的访问，这将完全消除被利用的可能性。...

CVE-2026-0309

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

EUVD-2026-75255

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

CVE-2026-0309

CVE-2026-0309 is currently a reserved candidate with no publicly available technical details. The vulnerability has not yet been announced. Monitor for updates once the assigning organization publicizes the entry.

PT-2026-89277

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x / 12.2.x Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, 12.1.x, or 12.2.x. It is, therefore, affected by a vulnerability. A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator t...

vulnerabilities in Fortinet FortiWeb

Fortinet has identified vulnerabilities in FortiWeb. The first vulnerability involves improper authentication in several versions of FortiWeb, allowing an unauthorized attacker to access the GUI and CLI interfaces by submitting arbitrary login credentials. This vulnerability also occurs in FortiW...

PT-2026-58009

Name of the Vulnerable Software and Affected Versions 1715-AENTR EtherNet/IP Adapter versions prior to 3.011 Description The 1715-AENTR EtherNet/IP Adapter exposes a network-accessible debug port that lacks proper privilege controls. This allows unauthenticated remote access to intrusive...

PAN-OS: Authenticated Command Injection in CLI

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of...

CVE-2026-8482

A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 included, 4.8.0 to 4.8.15 included , 5.0.0 to 5.0.5 included There is a possible leak of secret information if administration commands have been passed with the CLI command line tool. Someone with SSH access to the...

EUVD-2026-36148

A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface CLI to perform actions on the device with root privileges. The security risk posed by this issue is significantly minimized when CLI access i...

CVE-2026-0273

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI or Web UI. The security risk posed...

CVE-2026-0272

Technical details for CVE-2026-0272 are not publicly provided in the supplied documents beyond a general description of privilege escalation in PAN-OS CLI. Monitor for updates; no specifics on vulnerable component, affected versions, or fixes are present.

PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)

A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface CLI to perform actions on the device with root privileges. The security risk posed by this issue is significantly minimized when CLI access i...

Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, or 12.1.x. It is, therefore, affected by a vulnerability. A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass...