CVE-2019-1579
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
Published Jul 19, 2019 · updated Oct 1, 2026 · paloaltonetworks pan-os
Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.
Timeline
Detection, updates, and resolution for this record.
Jul 19, 2019 · Catalog
Detected
Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.
Jan 10, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jul 10, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Oct 1, 2026 · Catalog
Updated
Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.
Required action
Apply updates per vendor instructions.
CISA due date Jul 10, 2022
Affected
- cpe paloaltonetworks/pan-osversion unspecified
- vendor Palo Alto Networks PAN-OSversion unspecified
Sources
- CISA KEVCVE-2019-1579
Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.
cisa.gov - CVE.orgCVE-2019-1579
Official CVE identifier
cve.org - FIRST EPSSCVE-2019-1579
30-day exploitation probability 46.2%
first.org - NIST NVDCVE-2019-1579
Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.
nvd.nist.gov