Skip to content
Patcharo

PAN-OS

Palo Alto Networks PAN-OS 9.1

Vulnerabilities, fixed releases, vendor recommendation and support status of the 9.1 branch, from official sources.

Sources last modified 17 Jun 2026 · Last verified by Patcharo: 1 Oct 2026 at 13:37 UTC

7
Matched CVEs

including 1 critical

2
CISA KEV
9.1.17
Newest fix stated
End of life · 30 Jun 2024
Support

In brief

Recommended maintenance build
No official recommendation
Recommended release
No official recommendation
Releases listed by the vendor
No release list read from the vendor
CERT-FR
0 documents

Vulnerabilities affecting 9.1

Each record matched to this branch with the fixed release the source states, newest first.

  1. CVE-2024-8691

    PAN-OS: User Impersonation in GlobalProtect Portal

    High7.1CVSS 3.1, High
    First fixed release9.1.17
    Published
  2. CVE-2024-8687

    PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes

    High7.1CVSS 3.1, High
    First fixed release9.1.16
    Published
  3. CVE-2024-3385

    PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled

    High7.5CVSS 3.1, High
    First fixed release9.1.17
    Published
  4. CVE-2024-3384

    PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets

    High7.5CVSS 3.1, High
    First fixed release9.1.15-h1
    Published
  5. CVE-2024-0008

    PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface

    High8.8CVSS 3.1, High
    First fixed release9.1.17
    Published
  6. CVE-2022-0028KEV

    PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering

    High8.6CVSS 3.1, High
    First fixed release9.1.14-h4
    Published
  7. CVE-2020-2021KEVRansomware

    PAN-OS: Authentication Bypass in SAML Authentication

    Critical10CVSS 3.1, Critical
    First fixed release9.1.3
    Published

Vendor recommendation

The vendor's own statement about what to run, with its date and source. Separate from vulnerabilities and from support status: being behind a recommendation is not a vulnerability, and a supported release is not necessarily the recommended one.

Palo Alto Networks publishes no recommended-release page Patcharo can read. The fixed releases on this site come from the security advisories only; nothing is inferred from version numbers.

Support status

From the vendor's published life-cycle policy; support is not a recommendation.

  1. 9.1
    SupportEnd of life
    End of support30 Jun 2024

Palo Alto Networks End-of-Life Summary · retrieved 1 Oct 2026 at 13:38 UTC

How Patcharo reads this

Affected and fixed releases come from the vendor's structured statements, matched by exact version and patch level. The recommendation is the vendor's own statement; the support status comes from its life-cycle policy. Unknown never becomes Not affected.

Read the methodologyRead the guide: PAN-OS versions explained: release lines, maintenance releases and the -h1, -h2, -h3 suffixes

Other PAN-OS branches

All PAN-OS vulnerabilities and branches

Official sources