GlobalProtect 安全漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://security.paloaltonetworks.com/?product=GlobalProtect+App&sort=-date
• https://security.paloaltonetworks.com/CVE-2026-0227
• https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=12487
• https://blog.billows.com.tw/?p=4119
• https://avd.aliyun.com/detail?id=AVD-2024-8687
• https://security.paloaltonetworks.com/CVE-2024-3400
• https://www.ncsc.gov.uk/news/exploitation-palo-alto-globalprotect-gateway-vulnerability
• https://app.opencve.io/cve/?product=globalprotect&vendor=paloaltonetworks
• https://securityaffairs.com/186948/hacking/palo-alto-networks-addressed-a-globalprotect-flaw-poc-exists.html
• https://blogit.michelin.io/palo-alto-globalprotect-remote-full-compromise-exploit-chain/
• https://thehackernews.com/2026/01/palo-alto-fixes-globalprotect-dos-flaw.html
• https://nvd.nist.gov/vuln/detail/CVE-2024-3400

Related Vulnerabilities

• Palo Alto Networks PAN-OS GlobalProtect /ssl-vpn/login.esp 权限绕过漏洞（CVE-2026-0257）
• PoCCVE-2017-15944: Palo Alto Network PAN-OS - Remote Code Execution
• PoCCVE-2018-10141: Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site Scripting
• PoCCVE-2020-2036: Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting
• PoCCVE-2024-0012: PAN-OS Management Web Interface - Authentication Bypass
• PoCCVE-2024-3400: GlobalProtect - OS Command Injection
• PoCCVE-2024-9474: PAN-OS Management Web Interface - Command Injection
• PoCCVE-2025-0108: PAN-OS Management Interface - Path Confusion to Authentication Bypass
• PoCCVE-2025-0133: PAN-OS - Reflected Cross-Site Scripting
• PoCCVE-2024-0012: Palo Alto Networks PAN-OS身份认证绕过导致RCE漏洞(CVE-2024-0012)
• PoCpanos-default-login: Palo Alto Networks PAN-OS Default Login
• Palo Alto Networks PAN-OS /ssl-XXX/hipreport.esp 命令执行漏洞（CVE-2024-3400）