PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

PAN-OS CVE-2024-3400: Patch Your Palo Alto Firewalls

bishopfox.com | vulnerability | CVE-2024-3400 | #rce | #palo-alto-networks | #globalprotect | #threat-prevention | #pan-os | #cve-2024-3400 | #mitigation-bypass
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox shares details on PAN-OS CVE-2024-3400, a critical pre-auth RCE chain in GlobalProtect, including bypasses of Palo Alto's interim mitigations and new Threat Prevention rule IDs.
CVE
CVE-2024-3400
Published
Collected

Related coverage

vulnerability · volexity.com
Detecting Compromise of CVE-2024-3400 on Palo Alto Networks GlobalProtect Devices
# Detecting Compromise of CVE-2024-3400 on Palo Alto Networks GlobalProtect Devices May 15, 2024 Volexity Threat Research Last month, Volexity reported on its discovery of zero-day, in-the-wild...
vulnerability · volexity.com
Zero-Day Exploitation of Unauthenticated Remote Code Execution Vulnerability in GlobalProtect (CVE-2024-3400)
# Zero-Day Exploitation of Unauthenticated Remote Code Execution Vulnerability in GlobalProtect (CVE-2024-3400) April 12, 2024 Volexity Threat Research > _Volexity would like to thank Palo Alto...
High · vulnerability · bishopfox.com
Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypass
Bishop Fox publishes a detector for CVE-2026-0265, a pre-auth JWT signature bypass in PAN-OS and Panorama reachable when CAS is attached to an auth profile; one anonymous request yields a verdict.
vulnerability · bishopfox.com
Bishop Fox ASM Delivers 24-Hour Head Start Against Critical PAN-OS Vulnerability
Case study: Bishop Fox's Cosmos fingerprinted PAN-OS assets and warned customers about CVE-2024-0012 a full 24 hours before public exploits spread, leveraging firmware diffing and CPE matching.
vulnerability · bugcrowd.com
What you need to know about CVE-2025-0133
CVE-2025-0133 in Palo Alto Networks' GlobalProtect VPN gateway lets attackers hijack sessions via a tampered link. Bugcrowd's Casey Ellis and Von Tran explain the impact for defenders and hackers.
vulnerability · wiz.io
Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild
CVE-2026-0300: a buffer overflow in PAN-OS User-ID Authentication Portal (CVSS 9.3) allows unauthenticated root RCE, with limited in-the-wild exploitation of exposed instances; patching advised.
Back