CVE-2024-9474 CISA KEV · Actively exploitedLinked to ransomware
PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
CVSS score
6.9
EPSS probability
%94.8
Risk score
13.1
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: PAN-OS Management Web Interface - Command Injection
Makefile Go / Python
NVD reference
https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/
Makefile Go / Python
Similar Vulnerabilities
9.3
CVE-2024-0012 Actively exploited
PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
PA
Patch status unknownEPSS %100
9.1
CVE-2025-0108 Actively exploited
Missing authentication in Paloaltonetworks Pan OS
P
WorkaroundEPSS %98
8.1
CVE-2019-1579 Actively exploited
Vulnerability in N/a Palo Alto Networks GlobalProtect Portal/Gateway Interface
N
WorkaroundEPSS %46
9.8
CVE-2026-0300 Actively exploited
Out-of-bounds write in Paloaltonetworks Pan OS
P
Patch status unknownEPSS %32
7.2
CVE-2026-0261
OS command injection in Paloaltonetworks Pan OS
P
Patch status unknownEPSS %1
6.0
CVE-2026-0286
PAN-OS: Authenticated Command Injection in CLI
PA
Patch status unknownEPSS %2
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2024-9474"