CVE-2019-1579

Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.

• CWE-134
• CWE-134

• https://www.securityfocus.com/bid/109310Broken Link, Third Party Advisory, VDB Entry
• https://devco.re/blog/2019/07/17/attacking-ssl-vpn-part-1-PreAuth-RCE-on-Palo-Alto-GlobalProtect-with-Uber-as-case-study/Exploit, Third Party Advisory
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010Broken Link, Third Party Advisory
• https://security.paloaltonetworks.com/CVE-2019-1579Vendor Advisory
• https://www.securityfocus.com/bid/109310Broken Link, Third Party Advisory, VDB Entry
• https://devco.re/blog/2019/07/17/attacking-ssl-vpn-part-1-PreAuth-RCE-on-Palo-Alto-GlobalProtect-with-Uber-as-case-study/Exploit, Third Party Advisory
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010Broken Link, Third Party Advisory
• https://security.paloaltonetworks.com/CVE-2019-1579Vendor Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1579US Government Resource

Published

Jul 19, 2019

Last Modified

Aug 12, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15784Secure Reliable Transport (SRT) through 1.3.4 has a CSndULis…
• CVE-2019-15785FontForge 20190813 through 20190820 has a buffer overflow in…
• CVE-2019-15786ROBOTIS Dynamixel SDK through 3.7.11 has a buffer overflow v…
• CVE-2019-15787libZetta.rs through 0.1.2 has an integer overflow in the zpo…
• CVE-2019-15788Clara Genomics Analysis before 0.2.0 has an integer overflow…
• CVE-2019-15789Privilege escalation vulnerability in MicroK8s allows a low …7.8
• CVE-2019-15790Apport reads and writes information on a crashed process to …3.3
• CVE-2019-15791In shiftfs, a non-upstream patch to the Linux kernel include…7.8
• CVE-2019-15792In shiftfs, a non-upstream patch to the Linux kernel include…7.8
• CVE-2019-15793In shiftfs, a non-upstream patch to the Linux kernel include…8.8
• CVE-2019-15794Overlayfs in the Linux kernel and shiftfs, a non-upstream pa…6.7
• CVE-2019-15795python-apt only checks the MD5 sums of downloaded files in `…4.7