IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
8.1Hoch KEV In Ransomware genutzt

CVE-2019-1579Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

Palo Alto Networks GlobalProtect Portal/Gateway Interface Veröffentlicht: (vor 7 Jahren)

Bekannt ausgenutzt — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

CISA hat am 10.01.2022 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 10.07.2022.

Erforderliche Maßnahme: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2019-1579

Beschreibung

Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.

Schwachstellentyp (CWE): CWE-134

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
paloaltonetworks pan-os < 7.1.19
— Palo Alto Networks GlobalProtect Portal/Gateway Interface PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier, and PAN-OS 8.1.2 and earlier releases

Referenzen und Patches

CPE-Treffer (NVD) (3)
  • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* < 7.1.19
  • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 8.0.0 < 8.0.12
  • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 8.1.0 < 8.1.3

Neue CVEs im selben Produkt — Palo Alto PAN-OS / GlobalProtect

9.2Kritisch
CVE-2026-109619 KEV

RCE via stale global state

PHP Group PHP; Siemens AX4; Siemens CADRA; Siemens Capital

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subs…

100%EPSS
9.2Kritisch
CVE-2026-109618 KEV

RCE via OOM corruption

PHP Group PHP; Siemens AX4; Siemens CADRA; Siemens Capital

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The s…

100%EPSS
4.3Mittel
CVE-2026-0314

GlobalProtect App: Local Denial of Service (DoS) on Windows

Palo Alto Networks GlobalProtect App

A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by t…

5.9Mittel
CVE-2026-0315

GlobalProtect App: Local Privilege Escalation Vulnerability on macOS

Palo Alto Networks GlobalProtect App

A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. T…

1.1Niedrig
CVE-2026-0316

PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. The security risk posed by this issue is minimized wh…

1.2Niedrig
CVE-2026-0317

PAN-OS: Denial of Service Vulnerability

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service (DoS) condition by sending a specially crafted API request. The security risk posed by this…