Skip to contentPalo Alto Networks vulnerabilities
Newest
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)CVE-2026-02834.5 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)CVE-2026-02844.7 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Server-Side Request Forgery Vulnerability in Management Web InterfaceCVE-2026-02854.7 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Authenticated Command Injection in CLICVE-2026-02866.0 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +1 more +3 morePAN-OS: Denial of Service Vulnerabilities in Network Traffic ProcessingCVE-2026-02876.6 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +1 more +3 morePAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server AgentCVE-2026-02887.2 High
- palo alto networks cortex xsiam commvaultsecurityiq marketplace, cortex xsoar commvaultsecurityiq marketplace +1 moreCortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integrationCVE-2026-02748.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UICVE-2026-0273Public exploit6.1 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)CVE-2026-02726.0 Medium
- palo alto networks prisma access agentPrisma Access Agent: Local Privilege Escalation by Authorized UsersCVE-2026-02715.9 Medium
- palo alto networks cortex xsoarCortex XSOAR: Path Traversal VulnerabilityCVE-2026-02704.8 Medium
- palo alto networks cloud ngfw, pan-os, panorama +2 more +4 morePAN-OS: Denial of Service (DoS) in Tunnel Traffic ProcessingCVE-2026-02694.6 Medium
- palo alto networks prisma access agentPrisma Access Agent: Local Authenticated VPN Enforcement Bypass on LinuxCVE-2026-02684.4 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks globalprotect uwp app +2 moreGlobalProtect App: Information Exposure Vulnerability on macOSCVE-2026-02674.4 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2026-02661.1 Low
- palo alto networks prisma sd-wan ion, paloaltonetworks prisma sd-wan +1 morePrisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted PacketCVE-2026-02434.9 Medium
- palo alto networks prisma access agentPrisma Access Agent: Improper Certificate Validation VulnerabilityCVE-2026-02486.2 Medium
- palo alto networks trust protection foundationTrust Protection Foundation: SQL Injection VulnerabilityCVE-2026-02426.1 Medium
- palo alto networks prisma sd-wan ion, paloaltonetworks prisma sd-wan +1 morePrisma SD-WAN: Improper Certificate Validation VulnerabilityCVE-2026-02445.2 Medium
- palo alto networks trust protection foundationTrust Protection Foundation: Multiple Authorization Bypass VulnerabilitiesCVE-2026-02415.1 Medium
- palo alto networks prisma access agentPrisma Access Agent: Information Disclosure VulnerabilitiesCVE-2026-02454.3 Medium
- palo alto networks trust protection foundationTrust Protection Foundation: Sensitive Information Disclosure VulnerabilityCVE-2026-02404.5 Medium
- palo alto networks prisma access agentPrisma Access Agent: Local Privilege Escalation VulnerabilityCVE-2026-02465.9 Medium
- palo alto networks prisma access agentPrisma Access Agent Endpoint DLP: Authorization Bypass VulnerabilitiesCVE-2026-02475.9 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Certificate Validation Bypass VulnerabilitiesCVE-2026-02494.9 Medium
- palo alto networks chronosphere chronocollector, paloaltonetworks chronosphere collector +1 moreChronosphere Chronocollector Information Disclosure VulnerabilityCVE-2026-02394.9 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks globalprotect uwp app +2 moreGlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or GatewayCVE-2026-02505.2 Medium
- palo alto networks broker vmBroker VM: Improper Input Validation in Broker VM Certificate and Key FieldsCVE-2026-02381.1 Low
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks global protect app +2 moreGlobalProtect App: Local Privilege Escalation VulnerabilitiesCVE-2026-02515.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2026-02564.4 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: GlobalProtect Authentication Bypass VulnerabilitiesCVE-2026-0257In KEVPublic exploitEPSS 95.6%7.8 High
- palo alto networks prisma browserPrisma Browser: Access and Data Rule BypassCVE-2026-02355.8 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL FetchingCVE-2026-02584.8 Medium
- palo alto networks wildfire wf-500 and wf-500-b, paloaltonetworks pan-os +1 moreWildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)CVE-2026-02595.0 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Authenticated Admin Command Injection VulnerabilityCVE-2026-02616.1 Medium
- palo alto networks prisma browserPrisma Browser: Code Injection Enables Security Controls BypassCVE-2026-02367.3 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Denial of Service Vulnerabilities in Network Traffic ParsingCVE-2026-02626.6 Medium
- palo alto networks prisma browserPrisma Browser: Improperly Restricted Automation Bridge Allows Security BypassCVE-2026-02377.3 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Remote Code Execution (RCE) in IKEv2 ProcessingCVE-2026-02637.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code ExecutionCVE-2026-0264Public exploit7.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabledCVE-2026-0265Public exploit7.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication PortalCVE-2026-0300In KEVPublic exploitEPSS 41.7%9.3 Critical
- palo alto networks cortex xdr agentCortex XDR Agent: Local Administrator can disable the agent on WindowsCVE-2026-02324.0 Medium
- palo alto networks autonomous digital experience managerAutonomous Digital Experience Manager: Improper validation of ADEM certificateCVE-2026-02332.0 Low
- paloaltonetworks cortex xsiam, cortex xsoar, palo alto networks cortex xsiam microsoft teams marketplace +1 more +3 moreCortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integrationCVE-2026-02347.2 High
- palo alto networks cortex xdr broker vmCortex XDR Broker VM: Sensitive Information Disclosure VulnerabilityCVE-2026-02315.7 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Administrator can disable the agent on macOSCVE-2026-02304.0 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Denial of Service in Advanced DNS Security FeatureCVE-2026-02296.6 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Validation of Terminal Server Agent CertificateCVE-2026-02281.3 Low
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and PortalCVE-2026-02276.6 Medium
- Show moreLoading…