vulnerability
Palo Alto Networks PAN-OS: CVE-2022-0024: PAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration Commit
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:L/Au:S/C:C/I:C/A:C) | May 11, 2022 | Jan 7, 2025 | Mar 25, 2026 |
Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:C)
Published
May 11, 2022
Added
Jan 7, 2025
Modified
Mar 25, 2026
Description
A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated network-based PAN-OS administrator to upload a specifically created configuration that disrupts system processes and potentially execute arbitrary code with root privileges when the configuration is committed on both hardware and virtual firewalls.
This issue does not impact Panorama appliances or Prisma Access customers.
This issue does not impact Panorama appliances or Prisma Access customers.
Solution
palo-alto-networks-pan-os-upgrade-latest
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.