CVE-2024-9474

CISA KEV RANSOMWARE

ACT NOW Priority: 0.00 BB Relevance: 10/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators.

CISA Known Exploited Vulnerability

Vendor / Product Palo Alto Networks — PAN-OS

Date Added 2024-11-18

Remediation Due 2024-12-09

Ransomware Use CONFIRMED

https://security.paloaltonetworks.com/CVE-2024-9474 ; https://nvd.nist.gov/vuln/detail/CVE-2024-9474

Weakness Classification (1)

CWE-78

Affected Software (13)

Vendor	Product	Version
paloaltonetworks	pan-os	10.1.0 – 10.1.14
paloaltonetworks	pan-os	10.2.0 – 10.2.12
paloaltonetworks	pan-os	11.0.0 – 11.0.6
paloaltonetworks	pan-os	11.1.0 – 11.1.5
paloaltonetworks	pan-os	11.2.0 – 11.2.4
paloaltonetworks	pan-os	10.1.14
paloaltonetworks	pan-os	10.1.14
paloaltonetworks	pan-os	10.1.14
paloaltonetworks	pan-os	10.2.12
paloaltonetworks	pan-os	10.2.12
paloaltonetworks	pan-os	11.0.6
paloaltonetworks	pan-os	11.1.5
paloaltonetworks	pan-os	11.2.4