Vulnerability intelligence

CVE-2024-3400

Palo Alto Networks PAN-OS Command Injection Vulnerability

A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.

CVSS Score

Critical

EPSS — Exploit Probability

100%

Riskier than 100% of all CVEs · checked 2026-10-22

Exploitation

Confirmed in the wild

Used in ransomware campaigns

Remediation

Patch available

Federal deadline 2024-04-19

CISA required action

Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule. Deadline for federal agencies: 2024-04-19.

NVD entry Vendor patch PoC / advisory CISA KEV

1 article across 1 outlet · first covered Sep 7, 2026 · latest Sep 7, 2026

Coverage timeline

SOCRadar Connects ChatGPT to Threat Intelligence via MCP
socradar.io · Sep 7, 2026

Related CVEs — Palo Alto Networks

CVE-2026-0257KEV CVE-2026-0322KEV CVE-2026-0288 CVE-2026-0274 CVE-2026-0300KEV CVE-2026-0265 CVE-2026-0234