CVE-2020-2021
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
CVSS
—
No CVSS
EPSS
4.4%
p91
KEV
YES
Mar 25, 2022
Exploit Today
77
0-100
Published: — · Last modified: —
4.4%EPSS · 30 days4.4%
2026-09-182026-10-16
Product
Palo Alto Networks / PAN-OS
Vulnerability
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Added to KEV
Mar 25, 2022
Remediate by
Apr 15, 2022
Known ransomware use
Yes
Summary description
Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2020-2021
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-03227.2 HIG68.1%
KEV—70Palo Alto Networks PAN-OS Code Injection Vulnerability2dCVE-2025-01089.1 CRI99.9%
KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability23dCVE-2024-94747.2 HIG99.9%
KEV—80Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability74dCVE-2024-00129.8 CRI100.0%
KEV—80Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability74dCVE-2019-15798.1 HIG98.8%
KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability15dCVE-2024-3400—100.0%
KEV—80Palo Alto Networks PAN-OS Command Injection Vulnerability—