CVE-2024-0012

nvd.nist.gov • April 24, 2026

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like CVE-2024-9474 . The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended best practice deployment guidelines . This issue is applicable only to PAN-OS 10.2, PAN-OS 11.0, PAN-OS 11.1, and PAN-OS 11.2 software. Cloud NGFW and Prisma Access are not impacted by this vulnerability.

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities Disclosed in Palo Alto Networks PAN-OS Software On November 18, 2024, Palo Alto Networks disclosed two critical vulnerabilities in PAN-OS: CVE-2024-0012 and CVE-2024-9474. CVE-2024-0012 is an authentication bypass vulnerability that allows unauthenticated attackers to gain administrator privileges via the management web interface. CVE-2024-9474 is a privilege escalation vulnerability that enables authenticated users to execute commands with root privileges. Both vulnerabilities can be exploited together, posing a significant risk to organizations using affected PAN-OS versions. The vulnerabilities affect PAN-OS versions earlier than 11.2.4-h1, 11.1.5-h1, 11.0.6-h1, and 10.2.12-h2. Organizations are urged to patch their systems immediately to mitigate the risks. The vulnerabilities have been actively exploited in the wild, emphasizing the urgency of remediation. Security professionals should refer to CISA's guidance for further recommendations. 114 sources 73

Extracted Entities

CVE-2024-0012

The full story

Extracted Entities

Attack Types (1)

CVEs (2)

CWE Weaknesses (2)

MITRE ATT&CK (2)

Platforms (3)