{"id":"CVE-2016-9151","aliases":["EUVD-2016-9968","GHSA-48jw-g6cj-24gw"],"status":"published","title":"Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6...","description":"Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows local users to gain privileges via crafted values of unspecified environment variables.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01207,"percentile":0.68544,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-264"],"published":"2016-11-19T06:29:00Z","modified":"2026-06-17T00:55:35Z","exploits":[{"source":"exploitdb","id":"EDB-40788","title":"Palo Alto Networks PanOS - 'root_trace' Local Privilege Escalation","type":"local","platform":"linux","date":"2016-11-18","verified":true,"url":"https://www.exploit-db.com/exploits/40788"},{"source":"exploitdb","id":"EDB-40789","title":"Palo Alto Networks PanOS - 'root_reboot' Local Privilege Escalation","type":"local","platform":"linux","date":"2016-11-18","verified":true,"url":"https://www.exploit-db.com/exploits/40789"}],"products":[{"vendor":"paloaltonetworks","product":"pan-os"}],"references":[{"url":"https://www.exploit-db.com/exploits/40789/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/40788/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/94400","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037381","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://security.paloaltonetworks.com/CVE-2016-9151","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9151"},{"url":"https://www.exploit-db.com/exploits/40788"},{"url":"https://www.exploit-db.com/exploits/40789"},{"url":"https://github.com/advisories/GHSA-48jw-g6cj-24gw"}],"sources":{"cve":[{"id":"CVE-2016-9151","description":"Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows local users to gain privileges via crafted values of unspecified environment variables.","status":"published","published":"2016-11-19T06:29:00Z","modified":"2024-08-06T02:42:11.077Z","updated_at":"2026-11-02T14:33:31.764001Z"}],"euvd":[{"id":"EUVD-2016-9968","description":"Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows local users to gain privileges via crafted values of unspecified environment variables.","status":"published","published":"2016-11-19T06:29:00Z","modified":"2024-08-06T02:42:11Z","updated_at":"2026-11-03T02:22:27.654814Z"}],"ghsa":[{"id":"GHSA-48jw-g6cj-24gw","title":"Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6...","description":"Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows local users to gain privileges via crafted values of unspecified environment variables.","status":"published","published":"2022-05-13T01:28:24Z","modified":"2025-04-12T13:07:38Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:01:30.348567Z"}],"nvd":[{"id":"CVE-2016-9151","description":"Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows local users to gain privileges via crafted values of unspecified environment variables.","status":"published","published":"2016-11-19T06:59:03.403Z","modified":"2026-06-17T00:55:35.747Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:32.086916Z"}]}}