CVE-2024-8686

No fix known EPSS 1%CVSS 8.6

A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as root on the firewall.

Published 2024-09-11 · CVE record · OSV

Products: Palo Alto Networks PAN-OS, Palo Alto Networks Cloud NGFW, Palo Alto Networks Prisma Access