CVE-2024-2552: Palo Alto Networks PAN-OS

Medium severity, CVSS 6.0. EPSS: 0.5% chance of exploitation in the next 30 days.

A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions in the management plane and delete files on the firewall.

Affected products

• Palo Alto Networks PAN-OS: from 10.2.0, before 10.2.7 (fixed in 10.2.7); from 11.0.0, before 11.0.6 (fixed in 11.0.6); from 11.1.0, before 11.1.4 (fixed in 11.1.4); from 11.2.0, before 11.2.4 (fixed in 11.2.4); version 10.2.7 only; version 10.2.8 only; …

Published 2024-11-14. Last modified 2026-06-17.