PAN-OS GlobalProtect Command Injection
Vulnerability details
CVECVE-2024-3400
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2026-05-20
VendorPalo Alto
Affected softwarePalo Alto PAN-OS < 10.2.9
ExposureHigh
Affected devices1
Exploit statusActiveExploit
Recommendation & plan
Apply PAN-OS hotfix or implement threat prevention mitigations.
Due2026-09-17
Affected devices 1
| Device | Risk | Installed | Fixed | Status |
|---|---|---|---|---|
| corp-dc01 | Medium | older | patched | Open |
Remediation workflow
CVE โ Affected Software โ Affected Devices โ Risk โ Exploitability โ Security Recommendation โ Remediation Plan โ Approval โ Remediation โ Verification
Remediation requests require approval. After remediation, verification checks: vulnerability resolved, device healthy, exposure reduced.