Known Exploited Vulnerabilities November 18, 2024 · CISA KEV Catalog

CVE-2024-9474: Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-9474 Palo Alto Networks
Related: CVE-2026-0322: Palo Alto Networks PAN-OS Code Injection Vulnerability Known Exploited Vulnerabilities · Oct 14, 2026
CVE-2026-0257: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Known Exploited Vulnerabilities · May 29, 2026
CVE-2026-0300: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability Known Exploited Vulnerabilities · May 06, 2026