CVE-2023-38046: Palo Alto Networks PAN-OS

Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically created configuration to read local files and resources from the system.

Affected products

• Palo Alto Networks PAN-OS: from 10.2.0, before 10.2.4 (fixed in 10.2.4); version 11.0.0 only

Published 2023-07-12. Last modified 2026-06-17.