CVE Watch2 de out. de 2026

CVE-2019-1579

Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

CVSS

8.1

Alta

EPSS

44.2%

p99

KEV

SIM

10 de jan. de 2022

Exploit Today

0-100

Publicado: 19 de jul. de 2019 · Última mod.: 2 de out. de 2026 · CWE-134

EPSS · 30d

44.2%EPSS · 30 dias46.2%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Palo Alto Networks / PAN-OS

Vulnerabilidade

Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

Adicionado ao KEV

10 de jan. de 2022

Corrigir até

10 de jul. de 2022

Uso conhecido em ransomware

Sim

Descrição resumida

Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2019-1579

Descrição técnica

Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1200596.8 MÉD

17.9%

——5For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that column's name, as reported by the server, into a printf-style format string. It later expands that string with one argument while it builds the WHERE clause of its positioned SELECT, UPDATE, and DELETE statements. A column name that contains format directives makes the driver read unrelated memory, which can crash the application or copy client memory into query text sent to the server. The name can come from a server not trusted under current SSL settings, or from any database user who can create a table that the application reads with an updatable cursor. Versions before psqlODBC 18.00.0006 are affected.3d CVE-2026-63201—

37.7%

——11Netopeer2 is a server for implementing network configuration management based on the `NETCONF` Protocol. In affected versions, a low-privileged authenticated `NETCONF` user can remotely crash `netopeer2-server` by sending a `get RPC` with an invalid `subtree filter` whose text contains format specifiers. In `src/netconf.c`, `np2srv_rpc_get_cb()` sends the invalid value through `ERR()` to `np2log_printf()`, where `vsnprintf()` first formats the message safely. In `src/log.c`, that already formatted buffer is subsequently passed to `np2log()` as the format string itself, causing `vsyslog()` to interpret attacker-controlled percent sequences and read invalid pointer arguments. The reported denial of service was confirmed on version 2.8.7 using `NETCONF`-over-SSH and AddressSanitizer; reliable remote code execution was not confirmed. `The advisory identifies 2.8.8 as patched`; repository comparisons verify the fix in public release 2.8.21. The affected/fixed boundary remains unresolved because no public 2.8.8 tag was located, which does not establish the status of an untagged 2.8.8 build.3d CVE-2026-454528.3 ALT

19.0%

——6Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.20d CVE-2026-03227.2 ALT

77.8%

KEV—73Palo Alto Networks PAN-OS Code Injection Vulnerability22d CVE-2026-1020628.1 ALT

35.2%

——11An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server.21d CVE-2026-1019668.2 ALT

37.1%

——11A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics sensor resource submitted through gNMI listener.21d