CVE-2024-0012
Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
Palo Alto Networks · PAN-OS
Vulnerability details
Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products, including firewalls and VPN concentrators.
Added to CISA KEV: 2024-11-18
Ransomware campaign use: Known
CISA due date: 2024-12-09
Defensive guidance from CISA
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, management interface for affected devices should not be exposed to untrusted networks, including the internet.
This is the source's required-action field, not an independently validated patch procedure. Refer to the vendor for exact affected versions and fixes.
Source catalog date: 2026-11-06T19:44:45.1797Z · Last retrieved: 2026-11-06 21:02:26 UTC