topic Re: How to Patch Vulnerability - Plugin 43160 (CGI Generic SQL Injection) on GlobalProtect in Next-Generation Firewall Discussions

How to Patch Vulnerability - Plugin 43160 (CGI Generic SQL Injection) on GlobalProtect

P.Namtien — Wed, 17 Dec 2025 05:21:10 GMT

Body: We have detected a blind SQL injection vulnerability (Plugin ID: 43160) on GlobalProtect login CGI (/global-protect/login.esp) using Nessus.

Details: - CVSS Score: 7.5 (High) - Affected Parameter: 'action' - Example: /global-protect/login.esp?action=';WAITFOR DELAY '00:00:3';--

Environment: PAN-OS version: [Your Version] GlobalProtect Portal: [Your Portal URL]

Question: What is the recommended patch or configuration to mitigate this vulnerability?

Is there an official fix or workaround from Palo Alto Networks?

P.Namtien — Wed, 17 Dec 2025 05:23:15 GMT

Software Version

11.2.4-h7

S.Cantwell — Wed, 17 Dec 2025 19:34:41 GMT

The default GP Portal Page can be disabled, so not allow users to try and log onto the web portal of the Global Protect.

IThat would eliminate this issue/concern.

RyanAmstutz — Wed, 18 Mar 2026 11:33:46 GMT

HI @P.Namtien,

Is there a official fix or did you disable the Landing Page?