CVE-2024-9468: Palo Alto Networks PAN-OS

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due to a crafted packet through the data plane, resulting in a denial of service (DoS) condition. Repeated attempts to trigger this condition will result in PAN-OS entering maintenance mode.

Affected products

• Palo Alto Networks PAN-OS: from 10.2.0, before 10.2.4 (fixed in 10.2.4); from 10.2.5, before 10.2.7 (fixed in 10.2.7); from 11.0.0, before 11.0.4 (fixed in 11.0.4); from 11.0.5, before 11.0.6 (fixed in 11.0.6); from 11.1.0, before 11.1.3 (fixed in 11.1.3); version 10.2.4 only; …

Published 2024-10-09. Last modified 2026-06-17.