CVE-2024-9474 Scanner
CVE-2024-9474 Scanner - Command Injection vulnerability in PAN-OS Management Web Interface
Used 2.4k times · 4.3k assets checked · domain, ipv4, subdomain
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE
CVE-2024-9474
6.9
CVSSmedium
Exploitable remotely over the internet · requires high privileges.
Description
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.
Attack Vector
Network
Privileges Req.
High
User Interaction
None
cloud ngfwpan-osprisma access
Updated Sep 28, 2026View on NVD →
S4E scanner
CVE history: cloud ngfw
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →