CVE-2022-0030: Palo Alto Networks PAN-OS

High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days.

An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions.

Affected products

• Palo Alto Networks PAN-OS: from 8.1.0, before 8.1.24 (fixed in 8.1.24)

Published 2022-10-12. Last modified 2026-06-17.