CVE-2024-3400

A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.

• CWE-20
• CWE-77
• CWE-77

• https://security.paloaltonetworks.com/CVE-2024-3400Vendor Advisory
• https://unit42.paloaltonetworks.com/cve-2024-3400/Exploit, Vendor Advisory
• https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/Technical Description, Vendor Advisory
• https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/Exploit, Third Party Advisory
• https://security.paloaltonetworks.com/CVE-2024-3400Vendor Advisory
• https://unit42.paloaltonetworks.com/cve-2024-3400/Exploit, Vendor Advisory
• https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/Technical Description, Vendor Advisory
• https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/Exploit, Third Party Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-3400US Government Resource

Published

Apr 12, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-33993Cross-Site Scripting (XSS) vulnerability in School Event Man…6.1
• CVE-2024-33994Cross-Site Scripting (XSS) vulnerability in School Event Man…6.1
• CVE-2024-33996Incorrect validation of allowed event types in a calendar we…6.2
• CVE-2024-33997Additional sanitizing was required when opening the equation…6.1
• CVE-2024-33998Insufficient escaping of participants' names in the particip…5.4
• CVE-2024-33999The referrer URL used by MFA required additional sanitizing,…9.8
• CVE-2024-34000ID numbers displayed in the lesson overview report required …4.3
• CVE-2024-34001Actions in the admin preset tool did not include the necessa…8.4
• CVE-2024-34002In a shared hosting environment that has been misconfigured …6.5
• CVE-2024-34003In a shared hosting environment that has been misconfigured …5.9
• CVE-2024-34004In a shared hosting environment that has been misconfigured …6.5
• CVE-2024-34005In a shared hosting environment that has been misconfigured …6.5