On April 12, 2024, Palo Alto disclosed a critical vulnerability identified as CVE-2024-3400 in its PAN OS operating system, which carries the highest severity rating of 10.0 on the CVSS scale.

Coralogix

Palo Alto has disclosed a critical command injection vulnerability in its PAN OS operating system within the GlobalProtect feature. The vulnerability allows unauthenticated attackers to execute code with root privileges on the firewall. Approximately 22,500 exposed Palo Alto GlobalProtect firewall devices are affected. Mitigations and hotfix releases are available.

Palo Alto Global Protect Command Injection Vulnerability