CVE-2016-9150

9.8 criticalEPSS 35%

Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows remote attackers to execute arbitrary code via unspecified vectors.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 35% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2016-11-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

paloaltonetworks:pan-os

References

http://www.securityfocus.com/bid/94399
http://www.securitytracker.com/id/1037382
https://security.paloaltonetworks.com/CVE-2016-9150
https://www.exploit-db.com/exploits/40790/
http://www.securityfocus.com/bid/94399

Check your stack JSON