Actively exploited in the wild

Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

Palo Alto Networks - PAN-OS · Listed in the CISA KEV since 2022-01-10. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2019-1579

HighCVSS 8.1KEV

Published: 19/07/2019(UTC)Updated: 12/08/2026(UTC)Translated: 12/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

45.96%

99th percentile - higher than 99% of all known CVEs

Summary

Remote code execution vulnerability in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled. An unauthenticated remote attacker can execute arbitrary code.

Risk Assessment

Complete compromise of the device by a remote attacker.

Recommendation

Update PAN-OS to a patched version or disable unused GlobalProtect interfaces.

Original NVD description (English source)

Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.