# Firewall security incidents · pwn.watch

> Security incidents tagged Firewall (vendor, product, platform or attack type).

Page: https://pwn.watch/t/firewall · generated 2026-10-23T01:56:39.502Z

## Status (as of 2026-10-23)
- Incidents: 4 (0 live, 0 live and not fully patched, 4 patched)
- Days without a Firewall security incident: 689
- Newest incident started: 2024-11-27

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/firewall.json
- RSS (one item per incident, bumped on each update): https://pwn.watch/t/firewall/feed.xml
- This file: https://pwn.watch/t/firewall/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [Zyxel Multiple Firewalls Path Traversal](https://pwn.watch/i/zyxel-multiple-firewalls-cve-2024-11667) ([json](https://pwn.watch/i/zyxel-multiple-firewalls-cve-2024-11667.json)): high, closed, patched, started 2024-11-27, CVE-2024-11667
- [Palo Alto PAN-OS management interface auth bypass + privilege escalation](https://pwn.watch/i/palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474) ([json](https://pwn.watch/i/palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474.json)): critical, closed, patched, started 2024-11-18, CVE-2024-0012, CVE-2024-9474
- [Cisco ASA/FTD zero-days used in the ArcaneDoor espionage campaign](https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359) ([json](https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359.json)): high, closed, patched, started 2024-04-24, CVE-2024-20353, CVE-2024-20359
- [Palo Alto PAN-OS GlobalProtect zero-day (CVE-2024-3400)](https://pwn.watch/i/palo-alto-pan-os-globalprotect-zero-day-cve-2024-3400) ([json](https://pwn.watch/i/palo-alto-pan-os-globalprotect-zero-day-cve-2024-3400.json)): critical, closed, patched, started 2024-04-12, CVE-2024-3400