{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T17:40:31.642Z",
  "tag": {
    "id": "palo-alto",
    "label": "Palo Alto Networks",
    "isStack": false,
    "url": "https://pwn.watch/t/palo-alto",
    "feed": "https://pwn.watch/t/palo-alto/feed.xml"
  },
  "counts": {
    "incidents": 9,
    "live": 1,
    "notFullyPatched": 0,
    "patched": 9
  },
  "incidents": [
    {
      "slug": "palo-alto-networks-pan-os-cve-2026-0322",
      "title": "Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Code Injection Vulnerability",
      "url": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0322",
      "json": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0322.json",
      "status": "live",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Palo Alto Networks PAN-OS",
      "tags": [
        "palo-alto",
        "pan-os",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2026-0322"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-10-14",
      "closedAt": null,
      "updatedAt": "2026-10-14",
      "summary": "Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. Added to CISA KEV on 2026-10-14.",
      "xPost": null
    },
    {
      "slug": "palo-alto-networks-pan-os-cve-2026-0257",
      "title": "Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability",
      "url": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0257",
      "json": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0257.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Palo Alto Networks PAN-OS",
      "tags": [
        "palo-alto",
        "pan-os",
        "ransomware",
        "cisa-kev",
        "auth-bypass"
      ],
      "cveIds": [
        "CVE-2026-0257"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-05-29",
      "closedAt": "2026-05-29",
      "updatedAt": "2026-05-29",
      "summary": "Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection. Added to CISA KEV on 2026-05-29.",
      "xPost": null
    },
    {
      "slug": "palo-alto-networks-pan-os-cve-2026-0300",
      "title": "Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability",
      "url": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0300",
      "json": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0300.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Palo Alto Networks PAN-OS",
      "tags": [
        "palo-alto",
        "pan-os",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-0300"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-05-06",
      "closedAt": "2026-05-06",
      "updatedAt": "2026-05-06",
      "summary": "Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. Added to CISA KEV on 2026-05-06.",
      "xPost": null
    },
    {
      "slug": "palo-alto-networks-pan-os-cve-2025-0111",
      "title": "Palo Alto Networks PAN-OS: PAN-OS File Read Vulnerability",
      "url": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2025-0111",
      "json": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2025-0111.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Palo Alto Networks PAN-OS",
      "tags": [
        "palo-alto",
        "pan-os",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-0111"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-02-20",
      "closedAt": "2025-02-20",
      "updatedAt": "2025-02-20",
      "summary": "Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user. Added to CISA KEV on 2025-02-20.",
      "xPost": null
    },
    {
      "slug": "palo-alto-networks-pan-os-cve-2025-0108",
      "title": "Palo Alto Networks PAN-OS: PAN-OS Authentication Bypass Vulnerability",
      "url": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2025-0108",
      "json": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2025-0108.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Palo Alto Networks PAN-OS",
      "tags": [
        "palo-alto",
        "pan-os",
        "cisa-kev",
        "auth-bypass"
      ],
      "cveIds": [
        "CVE-2025-0108"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-02-18",
      "closedAt": "2025-02-18",
      "updatedAt": "2025-02-18",
      "summary": "Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web interface. This vulnerability allows an unauthenticated attacker with network access to the management web interface to bypass the authentication normally required and invoke certain PHP scripts. Added to CISA KEV on 2025-02-18.",
      "xPost": null
    },
    {
      "slug": "palo-alto-networks-pan-os-cve-2024-3393",
      "title": "Palo Alto Networks PAN-OS Malicious DNS Packet",
      "url": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2024-3393",
      "json": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2024-3393.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Palo Alto Networks PAN-OS",
      "tags": [
        "palo-alto",
        "pan-os",
        "cisa-kev",
        "dns"
      ],
      "cveIds": [
        "CVE-2024-3393"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-12-27",
      "closedAt": "2024-12-30",
      "updatedAt": "2024-12-30",
      "summary": "Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode. Added to the CISA KEV catalog on 2024-12-30.",
      "xPost": null
    },
    {
      "slug": "palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474",
      "title": "Palo Alto PAN-OS management interface auth bypass + privilege escalation",
      "url": "https://pwn.watch/i/palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474",
      "json": "https://pwn.watch/i/palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Palo Alto Networks PAN-OS",
      "tags": [
        "palo-alto",
        "pan-os",
        "zero-day",
        "auth-bypass",
        "firewall",
        "cisa-kev",
        "ransomware",
        "rce"
      ],
      "cveIds": [
        "CVE-2024-0012",
        "CVE-2024-9474"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-11-18",
      "closedAt": "2024-11-18",
      "updatedAt": "2024-11-18",
      "summary": "CVE-2024-0012: Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products, including firewalls and VPN concentrators. CVE-2024-9474: Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators. Added to the CISA KEV catalog on 2024-11-18. CISA lists known use in ransomware campaigns.",
      "xPost": null
    },
    {
      "slug": "palo-alto-networks-expedition-cve-2024-5910-9463-9465",
      "title": "Palo Alto Networks Expedition: 3 actively exploited vulnerabilities",
      "url": "https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465",
      "json": "https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Palo Alto Networks Expedition",
      "tags": [
        "palo-alto",
        "expedition",
        "cisa-kev",
        "pan-os",
        "rce",
        "sql-injection",
        "auth-bypass"
      ],
      "cveIds": [
        "CVE-2024-5910",
        "CVE-2024-9463",
        "CVE-2024-9465"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-07-10",
      "closedAt": "2024-11-14",
      "updatedAt": "2024-11-14",
      "summary": "CVE-2024-5910: Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data. CVE-2024-9463: Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls. CVE-2024-9465: Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system. Added to the CISA KEV catalog on 2024-11-07, 2024-11-14.",
      "xPost": null
    },
    {
      "slug": "palo-alto-pan-os-globalprotect-zero-day-cve-2024-3400",
      "title": "Palo Alto PAN-OS GlobalProtect zero-day (CVE-2024-3400)",
      "url": "https://pwn.watch/i/palo-alto-pan-os-globalprotect-zero-day-cve-2024-3400",
      "json": "https://pwn.watch/i/palo-alto-pan-os-globalprotect-zero-day-cve-2024-3400.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Palo Alto Networks PAN-OS",
      "tags": [
        "palo-alto",
        "pan-os",
        "zero-day",
        "rce",
        "vpn",
        "firewall",
        "cisa-kev",
        "ransomware"
      ],
      "cveIds": [
        "CVE-2024-3400"
      ],
      "affectedVersions": [
        "PAN-OS 10.2, 11.0 and 11.1 with GlobalProtect (exact hotfix ranges in the Palo Alto advisory)"
      ],
      "fixedVersions": [
        "Hotfix releases per the Palo Alto advisory, e.g. 10.2.9-h1, 11.0.4-h1, 11.1.2-h3"
      ],
      "startedAt": "2024-04-12",
      "closedAt": "2024-04-12",
      "updatedAt": "2024-04-12",
      "summary": "A command injection in the GlobalProtect feature of PAN-OS let unauthenticated attackers run code as root on Palo Alto firewalls (CVSS 10). Volexity caught an actor it tracks as UTA0218, assessed as likely state-backed, exploiting it as a zero-day, and Palo Alto's Unit 42 tracked the activity as Operation MidnightEclipse. Hotfixes shipped from mid-April 2024. Added to the CISA KEV catalog on 2024-04-12. CISA lists known use in ransomware campaigns.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "palo-alto-networks-pan-os-cve-2026-0322",
      "incidentTitle": "Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Code Injection Vulnerability",
      "severity": "high",
      "status": "live",
      "patchStatus": "patched",
      "date": "2026-10-14",
      "title": "CISA added CVE-2026-0322 to the KEV catalog (due 2026-10-17).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0322"
    },
    {
      "incident": "palo-alto-networks-pan-os-cve-2026-0257",
      "incidentTitle": "Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-05-29",
      "title": "CISA added CVE-2026-0257 to the KEV catalog (due 2026-06-01).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0257"
    },
    {
      "incident": "palo-alto-networks-pan-os-cve-2026-0300",
      "incidentTitle": "Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-05-06",
      "title": "CISA added CVE-2026-0300 to the KEV catalog (due 2026-05-09).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0300"
    },
    {
      "incident": "palo-alto-networks-pan-os-cve-2025-0111",
      "incidentTitle": "Palo Alto Networks PAN-OS: PAN-OS File Read Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-02-20",
      "title": "CISA added CVE-2025-0111 to the KEV catalog (due 2025-03-13).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2025-0111"
    },
    {
      "incident": "palo-alto-networks-pan-os-cve-2025-0108",
      "incidentTitle": "Palo Alto Networks PAN-OS: PAN-OS Authentication Bypass Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-02-18",
      "title": "CISA added CVE-2025-0108 to the KEV catalog (due 2025-03-11).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2025-0108"
    },
    {
      "incident": "palo-alto-networks-pan-os-cve-2024-3393",
      "incidentTitle": "Palo Alto Networks PAN-OS Malicious DNS Packet",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-12-30",
      "title": "CISA added CVE-2024-3393 to the KEV catalog (federal deadline 2025-01-20)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2024-3393"
    },
    {
      "incident": "palo-alto-networks-pan-os-cve-2024-3393",
      "incidentTitle": "Palo Alto Networks PAN-OS Malicious DNS Packet",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-12-27",
      "title": "CVE-2024-3393 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-3393",
      "url": "https://pwn.watch/i/palo-alto-networks-pan-os-cve-2024-3393"
    },
    {
      "incident": "palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474",
      "incidentTitle": "Palo Alto PAN-OS management interface auth bypass + privilege escalation",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-11-18",
      "title": "CVE-2024-0012 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-0012",
      "url": "https://pwn.watch/i/palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474"
    },
    {
      "incident": "palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474",
      "incidentTitle": "Palo Alto PAN-OS management interface auth bypass + privilege escalation",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-11-18",
      "title": "CVE-2024-9474 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-9474",
      "url": "https://pwn.watch/i/palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474"
    },
    {
      "incident": "palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474",
      "incidentTitle": "Palo Alto PAN-OS management interface auth bypass + privilege escalation",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-11-18",
      "title": "CISA added CVE-2024-0012 to the KEV catalog (federal deadline 2024-12-09)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474"
    },
    {
      "incident": "palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474",
      "incidentTitle": "Palo Alto PAN-OS management interface auth bypass + privilege escalation",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-11-18",
      "title": "CISA added CVE-2024-9474 to the KEV catalog (federal deadline 2024-12-09)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474"
    },
    {
      "incident": "palo-alto-networks-expedition-cve-2024-5910-9463-9465",
      "incidentTitle": "Palo Alto Networks Expedition: 3 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-11-14",
      "title": "CISA added CVE-2024-9463 to the KEV catalog (federal deadline 2024-12-05)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465"
    },
    {
      "incident": "palo-alto-networks-expedition-cve-2024-5910-9463-9465",
      "incidentTitle": "Palo Alto Networks Expedition: 3 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-11-14",
      "title": "CISA added CVE-2024-9465 to the KEV catalog (federal deadline 2024-12-05)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465"
    },
    {
      "incident": "palo-alto-networks-expedition-cve-2024-5910-9463-9465",
      "incidentTitle": "Palo Alto Networks Expedition: 3 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-11-07",
      "title": "CISA added CVE-2024-5910 to the KEV catalog (federal deadline 2024-11-28)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465"
    },
    {
      "incident": "palo-alto-networks-expedition-cve-2024-5910-9463-9465",
      "incidentTitle": "Palo Alto Networks Expedition: 3 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-10-09",
      "title": "CVE-2024-9463 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-9463",
      "url": "https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465"
    },
    {
      "incident": "palo-alto-networks-expedition-cve-2024-5910-9463-9465",
      "incidentTitle": "Palo Alto Networks Expedition: 3 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-10-09",
      "title": "CVE-2024-9465 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-9465",
      "url": "https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465"
    },
    {
      "incident": "palo-alto-networks-expedition-cve-2024-5910-9463-9465",
      "incidentTitle": "Palo Alto Networks Expedition: 3 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-07-10",
      "title": "CVE-2024-5910 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-5910",
      "url": "https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465"
    },
    {
      "incident": "palo-alto-pan-os-globalprotect-zero-day-cve-2024-3400",
      "incidentTitle": "Palo Alto PAN-OS GlobalProtect zero-day (CVE-2024-3400)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-04-12",
      "title": "CVE-2024-3400 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-3400",
      "url": "https://pwn.watch/i/palo-alto-pan-os-globalprotect-zero-day-cve-2024-3400"
    },
    {
      "incident": "palo-alto-pan-os-globalprotect-zero-day-cve-2024-3400",
      "incidentTitle": "Palo Alto PAN-OS GlobalProtect zero-day (CVE-2024-3400)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-04-12",
      "title": "CISA added CVE-2024-3400 to the KEV catalog (federal deadline 2024-04-19)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/palo-alto-pan-os-globalprotect-zero-day-cve-2024-3400"
    },
    {
      "incident": "palo-alto-pan-os-globalprotect-zero-day-cve-2024-3400",
      "incidentTitle": "Palo Alto PAN-OS GlobalProtect zero-day (CVE-2024-3400)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-04-12",
      "title": "Palo Alto publishes the advisory; Volexity and Unit 42 publish exploitation details",
      "body": null,
      "sourceUrl": "https://security.paloaltonetworks.com/CVE-2024-3400",
      "url": "https://pwn.watch/i/palo-alto-pan-os-globalprotect-zero-day-cve-2024-3400"
    }
  ]
}