CVE-2024-9474

nvd.nist.gov • April 24, 2026

A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities Disclosed in Palo Alto Networks PAN-OS Software On November 18, 2024, Palo Alto Networks disclosed two critical vulnerabilities in PAN-OS: CVE-2024-0012 and CVE-2024-9474. CVE-2024-0012 is an authentication bypass vulnerability that allows unauthenticated attackers to gain administrator privileges via the management web interface. CVE-2024-9474 is a privilege escalation vulnerability that enables authenticated users to execute commands with root privileges. Both vulnerabilities can be exploited together, posing a significant risk to organizations using affected PAN-OS versions. The vulnerabilities affect PAN-OS versions earlier than 11.2.4-h1, 11.1.5-h1, 11.0.6-h1, and 10.2.12-h2. Organizations are urged to patch their systems immediately to mitigate the risks. The vulnerabilities have been actively exploited in the wild, emphasizing the urgency of remediation. Security professionals should refer to CISA's guidance for further recommendations. 114 sources 73

Extracted Entities

CVE-2024-9474

The full story

Extracted Entities

Companies (1)

CVEs (1)

Platforms (1)