{"id":"CVE-2024-8686","published":"2024-09-11T16:34:21Z","modified":"2026-05-13T20:17:49Z","title":"PAN-OS: Command Injection Vulnerability","vendor":"Palo Alto Networks","product":"PAN-OS","tier":"tail","description":{"text":"A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as root on the firewall.","provenance":"source","from":"CVE.org"},"cvss":{"score":8.6,"severity":"HIGH","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Amber","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.01407,"percentile":0.72508,"provenance":"source"},"cwes":[{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command"}],"references":[{"url":"https://security.paloaltonetworks.com/CVE-2024-8686","tags":[]}],"priority":{"score":20.5,"factors":[{"name":"EPSS percentile","points":14.5},{"name":"CVSS severity","points":6.02}]},"vendorSlug":"palo-alto-networks","affectedVersions":[{"vendor":"Palo Alto Networks","product":"PAN-OS","versions":["11.2.2"]}],"euvd":{"id":"EUVD-2024-49345","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-palo-alto-networks-pan-os-cwe-78"}}