Skip to contentPaloaltonetworks vulnerabilities
Newest
- palo alto networks prisma sd-wan ion, paloaltonetworks prisma sd-wan +1 morePrisma SD-WAN: Improper Certificate Validation VulnerabilityCVE-2026-02445.2 Medium
- palo alto networks trust protection foundationTrust Protection Foundation: Multiple Authorization Bypass VulnerabilitiesCVE-2026-02415.1 Medium
- palo alto networks prisma access agentPrisma Access Agent: Information Disclosure VulnerabilitiesCVE-2026-02454.3 Medium
- palo alto networks trust protection foundationTrust Protection Foundation: Sensitive Information Disclosure VulnerabilityCVE-2026-02404.5 Medium
- palo alto networks prisma access agentPrisma Access Agent: Local Privilege Escalation VulnerabilityCVE-2026-02465.9 Medium
- palo alto networks prisma access agentPrisma Access Agent Endpoint DLP: Authorization Bypass VulnerabilitiesCVE-2026-02475.9 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Certificate Validation Bypass VulnerabilitiesCVE-2026-02494.9 Medium
- palo alto networks chronosphere chronocollector, paloaltonetworks chronosphere collector +1 moreChronosphere Chronocollector Information Disclosure VulnerabilityCVE-2026-02394.9 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks globalprotect uwp app +2 moreGlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or GatewayCVE-2026-02505.2 Medium
- palo alto networks broker vmBroker VM: Improper Input Validation in Broker VM Certificate and Key FieldsCVE-2026-02381.1 Low
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks global protect app +2 moreGlobalProtect App: Local Privilege Escalation VulnerabilitiesCVE-2026-02515.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2026-02564.4 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: GlobalProtect Authentication Bypass VulnerabilitiesCVE-2026-0257In KEVPublic exploitEPSS 95.6%7.8 High
- palo alto networks prisma browserPrisma Browser: Access and Data Rule BypassCVE-2026-02355.8 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL FetchingCVE-2026-02584.8 Medium
- palo alto networks wildfire wf-500 and wf-500-b, paloaltonetworks pan-os +1 moreWildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)CVE-2026-02595.0 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Authenticated Admin Command Injection VulnerabilityCVE-2026-02616.1 Medium
- palo alto networks prisma browserPrisma Browser: Code Injection Enables Security Controls BypassCVE-2026-02367.3 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Denial of Service Vulnerabilities in Network Traffic ParsingCVE-2026-02626.6 Medium
- palo alto networks prisma browserPrisma Browser: Improperly Restricted Automation Bridge Allows Security BypassCVE-2026-02377.3 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Remote Code Execution (RCE) in IKEv2 ProcessingCVE-2026-02637.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code ExecutionCVE-2026-0264Public exploit7.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabledCVE-2026-0265Public exploit7.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication PortalCVE-2026-0300In KEVPublic exploitEPSS 41.7%9.3 Critical
- palo alto networks cortex xdr agentCortex XDR Agent: Local Administrator can disable the agent on WindowsCVE-2026-02324.0 Medium
- palo alto networks autonomous digital experience managerAutonomous Digital Experience Manager: Improper validation of ADEM certificateCVE-2026-02332.0 Low
- paloaltonetworks cortex xsiam, cortex xsoar, palo alto networks cortex xsiam microsoft teams marketplace +1 more +3 moreCortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integrationCVE-2026-02347.2 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and PortalCVE-2026-02276.6 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Improper Neutralization of Input in the Management Web InterfaceCVE-2025-4615Public exploit5.4 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Session Token Disclosure VulnerabilityCVE-2025-46144.8 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Interception in Endpoint Traffic Policy EnforcementCVE-2025-42271.0 Low
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web InterfaceCVE-2025-42318.6 High
- paloaltonetworks globalprotect, palo alto networks globalprotect app +1 moreGlobalProtect: Authenticated Code Injection Through Wildcard on macOSCVE-2025-42328.5 High
- palo alto networks globalprotect app, globalprotect uwp app, paloaltonetworks globalprotect +2 moreGlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect AppCVE-2025-01355.2 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted PacketsCVE-2025-01308.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated File Deletion Vulnerability on the Management Web InterfaceCVE-2025-01245.1 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks globalprotect uwp app +2 moreGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityCVE-2025-01207.1 High
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks globalprotect uwp app +2 moreGlobalProtect App: Execution of Unsafe ActiveX Control VulnerabilityCVE-2025-01186.0 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Denial of Service (DoS) in GlobalProtectCVE-2025-01148.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated File Read Vulnerability in the Management Web InterfaceCVE-2025-0111In KEV7.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authentication Bypass in the Management Web InterfaceCVE-2025-0108In KEVPublic exploitEPSS 98.5%8.8 High
- palo alto networks expedition, pan-os, cloud ngfw +2 more +4 moreExpedition: OS Command Injection VulnerabilityCVE-2025-0107EPSS 78.4%7.7 High
- palo alto networks expedition, cloud ngfw, pan-os +2 more +4 moreExpedition: Wildcard Expansion VulnerabilityCVE-2025-01066.9 Medium
- palo alto networks expedition, cloud ngfw, pan-os +2 more +4 moreExpedition: Arbitrary File Deletion VulnerabilityCVE-2025-0105EPSS 13.2%6.9 Medium
- palo alto networks expedition, cloud ngfw, pan-os +2 more +4 moreExpedition: Cross-Site Scripting (XSS) VulnerabilityCVE-2025-01047.0 High
- palo alto networks expedition, cloud ngfw, pan-os +2 more +4 moreExpedition: SQL Injection VulnerabilityCVE-2025-01039.2 Critical
- palo alto networks pan-os, cloud ngfw, paloaltonetworks prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted PacketCVE-2024-3393In KEVEPSS 30.2%8.7 High
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks globalprotect ios app +1 more +3 moreGlobalProtect App: Insufficient Certificate Validation Leads to Privilege EscalationCVE-2024-59216.0 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management InterfaceCVE-2024-9474In KEVPublic exploitEPSS 93.8%6.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)CVE-2024-0012In KEVPublic exploitEPSS 99.8%9.3 Critical
- Show moreLoading…