Skip to contentPaloaltonetworks Pan-os vulnerabilities
- php, paloaltonetworks pan-os, panorama virtual appliance +111 more +113 moreRCE via stale global stateCVE-2026-109619In KEVPublic exploitFix availableEPSS 100.0%9.2 Critical
- php, paloaltonetworks pan-os, panorama virtual appliance +110 more +112 moreRCE via OOM corruptionCVE-2026-109618In KEVPublic exploitFix availableEPSS 100.0%9.2 Critical
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Authenticated Remote Code Execution (RCE) in the Management InterfaceCVE-2026-0322In KEVPublic exploit8.6 High
- palo alto networks pan-os, cloud ngfw, prisma access +1 more +3 morePAN-OS: Information Disclosure Vulnerability in URL FilteringCVE-2026-03011.7 Low
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Multiple Cross-Site Scripting (XSS) VulnerabilitiesCVE-2026-02791.3 Low
- palo alto networks cloud ngfw, pan-os, panorama +2 more +4 morePAN-OS: IPv6 Firewall Policy BypassCVE-2026-02801.7 Low
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Information Disclosure Vulnerability in Management Web InterfaceCVE-2026-02812.1 Low
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: File Deletion Vulnerability in Management Web InterfaceCVE-2026-02822.7 Low
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)CVE-2026-02834.5 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)CVE-2026-02844.7 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Server-Side Request Forgery Vulnerability in Management Web InterfaceCVE-2026-02854.7 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Authenticated Command Injection in CLICVE-2026-02866.0 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +1 more +3 morePAN-OS: Denial of Service Vulnerabilities in Network Traffic ProcessingCVE-2026-02876.6 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +1 more +3 morePAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server AgentCVE-2026-02887.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UICVE-2026-0273Public exploit6.1 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)CVE-2026-02726.0 Medium
- palo alto networks cloud ngfw, pan-os, panorama +2 more +4 morePAN-OS: Denial of Service (DoS) in Tunnel Traffic ProcessingCVE-2026-02694.6 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2026-02661.1 Low
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2026-02564.4 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: GlobalProtect Authentication Bypass VulnerabilitiesCVE-2026-0257In KEVPublic exploitEPSS 95.6%7.8 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL FetchingCVE-2026-02584.8 Medium
- palo alto networks wildfire wf-500 and wf-500-b, paloaltonetworks pan-os +1 moreWildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)CVE-2026-02595.0 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Authenticated Admin Command Injection VulnerabilityCVE-2026-02616.1 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Denial of Service Vulnerabilities in Network Traffic ParsingCVE-2026-02626.6 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Remote Code Execution (RCE) in IKEv2 ProcessingCVE-2026-02637.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code ExecutionCVE-2026-0264Public exploit7.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabledCVE-2026-0265Public exploit7.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication PortalCVE-2026-0300In KEVPublic exploitEPSS 41.7%9.3 Critical
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and PortalCVE-2026-02276.6 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Improper Neutralization of Input in the Management Web InterfaceCVE-2025-4615Public exploit5.4 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Session Token Disclosure VulnerabilityCVE-2025-46144.8 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web InterfaceCVE-2025-42318.6 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted PacketsCVE-2025-01308.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated File Deletion Vulnerability on the Management Web InterfaceCVE-2025-01245.1 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Denial of Service (DoS) in GlobalProtectCVE-2025-01148.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated File Read Vulnerability in the Management Web InterfaceCVE-2025-0111In KEV7.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authentication Bypass in the Management Web InterfaceCVE-2025-0108In KEVPublic exploitEPSS 98.5%8.8 High
- palo alto networks pan-os, cloud ngfw, paloaltonetworks prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted PacketCVE-2024-3393In KEVEPSS 30.2%8.7 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management InterfaceCVE-2024-9474In KEVPublic exploitEPSS 93.8%6.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)CVE-2024-0012In KEVPublic exploitEPSS 99.8%9.3 Critical
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted PacketCVE-2024-25508.7 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate AdministratorCVE-2024-59204.6 Medium
- palo alto networks pan-os, cloud ngfw +1 morePAN-OS: Server-Side Request Forgery in WildFireCVE-2024-59172.1 Low
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)CVE-2024-25526.8 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect UserCVE-2024-59185.3 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Authenticated XML External Entities (XXE) Injection VulnerabilityCVE-2024-59195.1 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted PacketCVE-2024-25518.7 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Privilege Escalation (PE) Vulnerability in XML APICVE-2024-94715.1 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted PacketCVE-2024-94688.2 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: User Impersonation in GlobalProtect PortalCVE-2024-86915.3 Medium
- Show moreLoading…