boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2019-1579HIGH
n/a Palo Alto Networks GlobalProtect Portal/Gateway Interface — Palo Alto Networks PAN-OS
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  H  H  H    8.1   .4596   98.7   YES
AFFECTED
  Product                                                    Versions                                                                                         Fixed
  Palo Alto Networks GlobalProtect Portal/Gateway Interface  PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier, and  PAN-OS 8.1.2  and earlier releases –  —
TIMELINE
  Dec 6   Reserved by palo_alto
  Jan 10  Added to CISA KEV, remediation due 2022-07-10
  Jan 10  Published (CNA: palo_alto)
  Aug 12  EXPLOIT PUBLISHED — CVE-2019-1579 (Palo Alto Networks GlobalProtect Portal/Gateway Interface). Public exploit reference added.
CWE-134 · CNA: palo_alto · CVSS v3.1 · 5 references · NVD status: Analyzed · KEV due July 10, 2022

Description

Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.

Lifecycle

Complete event history — 4 events, chronological
DateEventDetail
December 6, 2018ReservedReserved by palo_alto
January 10, 2022KEV ADDEDAdded to CISA KEV, remediation due 2022-07-10
January 10, 2022PublishedPublished (CNA: palo_alto)
August 12, 2026EXPLOIT PUBLISHEDEXPLOIT PUBLISHED — CVE-2019-1579 (Palo Alto Networks GlobalProtect Portal/Gateway Interface). Public exploit reference added.

Affected

Affected products and packages — 1 row
VendorProduct / PackageEcosystemVersion introducedFixed
n/aPalo Alto Networks GlobalProtect Portal/Gateway Interface—PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier, and PAN-OS 8.1.2 and earlier releases—

Weaknesses

CWE-134

References (5)

Related

Authoritative record: CVE-2019-1579 at cve.org

Weaknesses: CWE-134

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2019-1579 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.