CVE Watch—

CVE-2024-3400

Palo Alto Networks PAN-OS Command Injection Vulnerability

CVSS

—

No CVSS

EPSS

100.0%

p100

KEV

YES

Apr 12, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

100.0%EPSS · 30 days100.0%

2026-08-022026-08-30

KEV catalog record

Product

Palo Alto Networks / PAN-OS

Vulnerability

Palo Alto Networks PAN-OS Command Injection Vulnerability

Added to KEV

Apr 12, 2024

Remediate by

Apr 19, 2024

Known ransomware use

Yes

Summary description

Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.

Required action

Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.

Notes

https://security.paloaltonetworks.com/CVE-2024-3400 ; https://nvd.nist.gov/vuln/detail/CVE-2024-3400

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2024-94747.2 HIG

99.9%

KEV—80Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability27d CVE-2024-00129.8 CRI

100.0%

KEV—80Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability27d CVE-2019-15798.1 HIG

98.7%

KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability19d CVE-2025-0108—

99.9%

KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability—CVE-2017-15944—

99.9%

KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability—CVE-2026-0257—

99.8%

KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability—