vulnerability
Palo Alto Networks PAN-OS: CVE-2024-5911: PAN-OS: File Upload Vulnerability in the Panorama Web Interface
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:L/Au:M/C:N/I:N/A:C) | Jul 10, 2024 | Jan 7, 2025 | Mar 25, 2026 |
Severity
6
CVSS
(AV:N/AC:L/Au:M/C:N/I:N/A:C)
Published
Jul 10, 2024
Added
Jan 7, 2025
Modified
Mar 25, 2026
Description
An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventually cause the Panorama to enter maintenance mode, which requires manual intervention to bring the Panorama back online.
Solution
palo-alto-networks-pan-os-upgrade-latest
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.