CVE Watch—

CVE-2024-0012

Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

CVSS

—

No CVSS

EPSS

99.7%

p100

KEV

YES

Nov 18, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

99.7%EPSS · 30 days99.7%

2026-06-302026-07-16

KEV catalog record

Product

Palo Alto Networks / PAN-OS

Vulnerability

Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

Added to KEV

Nov 18, 2024

Remediate by

Dec 9, 2024

Known ransomware use

Yes

Summary description

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products, including firewalls and VPN concentrators.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, management interface for affected devices should not be exposed to untrusted networks, including the internet.

Notes

https://security.paloaltonetworks.com/CVE-2024-0012 ; https://nvd.nist.gov/vuln/detail/CVE-2024-0012

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2024-3400—

100.0%

KEV—80Palo Alto Networks PAN-OS Command Injection Vulnerability—CVE-2025-0108—

99.9%

KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability—CVE-2017-15944—

99.9%

KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability—CVE-2024-9474—

99.8%

KEV—80Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability—CVE-2026-0257—

99.7%

KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability—CVE-2019-1579—

98.4%

KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability—