Palo Alto Networks · PAN-OS
CVE-2019-1579
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
Exploited in attacks
Used by ransomware
High 8.1 Attack chance: 44%
What it is
Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.
CISA: Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: July 10, 2022
More exploited flaws from Palo Alto Networks
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Oct 14, 2026 | Code Injection | PAN-OS | High 8.6 | 1.7% |
| May 29, 2026 | Authentication Bypass | PAN-OS | High 7.8 | 95% |
| May 6, 2026 | Out-of-bounds Write | PAN-OS | Critical 9.3 | 42% |
| Feb 20, 2025 | File Read | PAN-OS | High 7.1 | 2.0% |
| Feb 18, 2025 | Authentication Bypass | PAN-OS | High 8.8 | 98% |
| Dec 30, 2024 | Malicious DNS Packet | PAN-OS | High 8.7 | 29% |
| Nov 18, 2024 | Management Interface Authentication Bypass | PAN-OS | Critical 9.3 | 99.8% |
| Nov 18, 2024 | Management Interface OS Command Injection | PAN-OS | Medium 6.9 | 94% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.