Skip to contentPaloaltonetworks vulnerabilities
Newest
- php, paloaltonetworks pan-os, panorama virtual appliance +111 more +113 moreRCE via stale global stateCVE-2026-109619In KEVPublic exploitFix availableEPSS 100.0%9.2 Critical
- php, paloaltonetworks pan-os, panorama virtual appliance +110 more +112 moreRCE via OOM corruptionCVE-2026-109618In KEVPublic exploitFix availableEPSS 100.0%9.2 Critical
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Authenticated Remote Code Execution (RCE) in the Management InterfaceCVE-2026-0322In KEVPublic exploit8.6 High
- palo alto networks pan-os, cloud ngfw, prisma access +1 more +3 morePAN-OS: Information Disclosure Vulnerability in URL FilteringCVE-2026-03011.7 Low
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local Privilege Escalation VulnerabilitiesCVE-2026-02995.9 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)CVE-2026-02985.2 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel HandshakeCVE-2026-02975.2 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Improper Certificate Validation Bypass VulnerabilityCVE-2026-02964.5 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local Privilege Escalation via Race Condition on macOSCVE-2026-02954.1 Medium
- palo alto networks prisma access agentPrisma Access Agent: Local Privilege EscalationCVE-2026-02946.0 Medium
- palo alto networks prisma access agentPrisma Access Agent: Anti-Tamper Protection Bypass on WindowsCVE-2026-02935.6 Medium
- palo alto networks prisma access agentPrisma Access Agent: Local Security Inspection Bypass Vulnerability on WindowsCVE-2026-02922.1 Low
- palo alto networks prisma access agentPrisma Access Agent: Authenticated Limited File Deletion on LinuxCVE-2026-02911.1 Low
- palo alto networks prisma browserPrisma Browser: Sensitive Information Disclosure VulnerabilityCVE-2026-02900.5 Low
- palo alto networks prisma browserPrisma Browser: Inappropriate Implementation in Account ProtectionCVE-2026-02890.5 Low
- palo alto networks prisma browserPrisma Browser: Local Privilege Escalation on macOSCVE-2026-02752.0 Low
- palo alto networks cortex xdr broker vmCortex XDR Broker VM: Privilege Escalation (PE) VulnerabilityCVE-2026-02761.1 Low
- palo alto networks prisma access agentPrisma Access Agent: Improper Certificate Validation on iOSCVE-2026-02775.7 Medium
- palo alto networks prisma access agentPrisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on WindowsCVE-2026-02785.8 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Multiple Cross-Site Scripting (XSS) VulnerabilitiesCVE-2026-02791.3 Low
- palo alto networks cloud ngfw, pan-os, panorama +2 more +4 morePAN-OS: IPv6 Firewall Policy BypassCVE-2026-02801.7 Low
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Information Disclosure Vulnerability in Management Web InterfaceCVE-2026-02812.1 Low
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: File Deletion Vulnerability in Management Web InterfaceCVE-2026-02822.7 Low
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)CVE-2026-02834.5 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)CVE-2026-02844.7 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Server-Side Request Forgery Vulnerability in Management Web InterfaceCVE-2026-02854.7 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Authenticated Command Injection in CLICVE-2026-02866.0 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +1 more +3 morePAN-OS: Denial of Service Vulnerabilities in Network Traffic ProcessingCVE-2026-02876.6 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +1 more +3 morePAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server AgentCVE-2026-02887.2 High
- cyberark software, a palo alto networks company pam sh vault, paloaltonetworks idira privileged access manager vault +1 moreIdira Privileged Access Manager (PAM) Self-Hosted Vault: Denial of Service due to Unexpected Input ProcessingCVE-2026-451698.7 High
- cyberark software, a palo alto networks company vendor pam, paloaltonetworks idira privilege cloud connector +1 moreIdira Vendor PAM - Self-Hosted Connector: Potential Security Bypass due to Incomplete TLS Certificate ValidationCVE-2026-451707.5 High
- paloaltonetworks idira privileged session manager, cyberark software, a palo alto networks company privileged session manager, vault +1 moreIdira Privileged Session Manager (PSM): Potential Code Execution due to an Incomplete Input ValidationCVE-2026-451718.7 High
- paloaltonetworks idira privileged session manager for ssh, cyberark software, a palo alto networks company pam self-hosted, privilege cloud +1 moreIdira Privileged Session Manager for SSH (PSMP): Arbitrary Command Execution via Improper Neutralization of Special Elements used in an OS CommandCVE-2026-451728.7 High
- paloaltonetworks idira identity browser extension, cyberark software, a palo alto networks company identity browser extensions +1 moreIdira Identity Browser Extension: Unauthorized Application Interaction via Origin Validation FailureCVE-2026-451738.4 High
- cyberark software, a palo alto networks company idira endpoint privilege managerIdira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon InitializationCVE-2026-451748.5 High
- cyberark software, a palo alto networks company idira endpoint privilege managerIdira Endpoint Privilege Manager Agent: Security Control and Cryptographic Validation Bypass in Internal Agent Validation ProcessesCVE-2026-451758.5 High
- cyberark software, a palo alto networks company idira endpoint privilege managerIdira Endpoint Privilege Manager Agent: Local Privilege Escalation via Internal Communication or File Operation ManipulationCVE-2026-451768.9 High
- cyberark software, a palo alto networks company conjur cloud (edge finding only), paloaltonetworks idira secrets manager edge +1 moreIdira Secrets Manager SaaS Edge: Authentication Bypass of an internal validation mechanismCVE-2026-451779.1 Critical
- paloaltonetworks idira secrets manager, cyberark software, a palo alto networks company conjur enterprise, paloaltonetworks idira secrets manager credential providers +2 moreIdira Secrets Manager Self-Hosted: Improper Access Control in Internal Cluster EndpointsCVE-2026-451788.4 High
- palo alto networks cortex xsiam commvaultsecurityiq marketplace, cortex xsoar commvaultsecurityiq marketplace +1 moreCortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integrationCVE-2026-02748.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UICVE-2026-0273Public exploit6.1 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)CVE-2026-02726.0 Medium
- palo alto networks prisma access agentPrisma Access Agent: Local Privilege Escalation by Authorized UsersCVE-2026-02715.9 Medium
- palo alto networks cortex xsoarCortex XSOAR: Path Traversal VulnerabilityCVE-2026-02704.8 Medium
- palo alto networks cloud ngfw, pan-os, panorama +2 more +4 morePAN-OS: Denial of Service (DoS) in Tunnel Traffic ProcessingCVE-2026-02694.6 Medium
- palo alto networks prisma access agentPrisma Access Agent: Local Authenticated VPN Enforcement Bypass on LinuxCVE-2026-02684.4 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks globalprotect uwp app +2 moreGlobalProtect App: Information Exposure Vulnerability on macOSCVE-2026-02674.4 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2026-02661.1 Low
- palo alto networks prisma sd-wan ion, paloaltonetworks prisma sd-wan +1 morePrisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted PacketCVE-2026-02434.9 Medium
- palo alto networks prisma access agentPrisma Access Agent: Improper Certificate Validation VulnerabilityCVE-2026-02486.2 Medium
- Show olderLoading…