Palo Alto Networks
Security news, advisories and exploited vulnerabilities.
News stories · 30d
4
Advisories · 30d
12
Added to KEV · 90d
1
Actively exploited (CISA KEV)
| Added | CVE | Product | Vulnerability | Ransomware |
|---|---|---|---|---|
| 2026-10-14 | CVE-2026-0322 | PAN-OS | Palo Alto Networks PAN-OS Code Injection Vulnerability | |
| 2026-05-29 | CVE-2026-0257 | PAN-OS | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | Known |
| 2026-05-06 | CVE-2026-0300 | PAN-OS | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | |
| 2025-02-20 | CVE-2025-0111 | PAN-OS | Palo Alto Networks PAN-OS File Read Vulnerability | |
| 2025-02-18 | CVE-2025-0108 | PAN-OS | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | |
| 2024-12-30 | CVE-2024-3393 | PAN-OS | Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability | |
| 2024-11-18 | CVE-2024-9474 | PAN-OS | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | Known |
| 2024-11-18 | CVE-2024-0012 | PAN-OS | Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability | Known |
| 2024-11-14 | CVE-2024-9465 | Expedition | Palo Alto Networks Expedition SQL Injection Vulnerability | |
| 2024-11-14 | CVE-2024-9463 | Expedition | Palo Alto Networks Expedition OS Command Injection Vulnerability | |
| 2024-11-07 | CVE-2024-5910 | Expedition | Palo Alto Networks Expedition Missing Authentication Vulnerability | |
| 2024-04-12 | CVE-2024-3400 | PAN-OS | Palo Alto Networks PAN-OS Command Injection Vulnerability | Known |
| 2022-08-22 | CVE-2022-0028 | PAN-OS | Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability | |
| 2022-08-18 | CVE-2017-15944 | PAN-OS | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | |
| 2022-03-25 | CVE-2020-2021 | PAN-OS | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | Known |
| 2022-01-10 | CVE-2019-1579 | PAN-OS | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | Known |
CVEs in the news
Timeline (last 30 days)
- CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM) — Palo Alto Networks Advisories, 2026-10-17
- U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog — Security Affairs, 2026-10-15
- CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM) — Palo Alto Networks Advisories, 2026-10-15
- CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM) — Palo Alto Networks Advisories, 2026-10-15
- CVE-2026-0317 PAN-OS: Denial of Service Vulnerability (Severity: LOW) — Palo Alto Networks Advisories, 2026-10-15
- Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution — SecurityWeek +1 sources, 2026-10-15
- Hackers Exploit Palo Alto PAN-OS 0-day Flaw to Gain Root Code Execution on Firewalls — Cybersecurity News, 2026-10-15
- Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks — BleepingComputer +3 sources, 2026-10-14
- CVE-2026-0312 Checkov by Prisma Cloud: Path Traversal Vulnerabilities (Severity: MEDIUM) — Palo Alto Networks Advisories, 2026-10-14
- CVE-2026-0311 Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability (Severity: LOW) — Palo Alto Networks Advisories, 2026-10-14
- CVE-2026-0314 GlobalProtect App: Local Denial of Service (DoS) on Windows (Severity: MEDIUM) — Palo Alto Networks Advisories, 2026-10-14
- CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama (Severity: MEDIUM) — Palo Alto Networks Advisories, 2026-10-14
- CVE-2026-0315 GlobalProtect App: Local Privilege Escalation Vulnerability on macOS (Severity: MEDIUM) — Palo Alto Networks Advisories, 2026-10-14
- CVE-2026-0316 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability (Severity: LOW) — Palo Alto Networks Advisories, 2026-10-14
- CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability (Severity: MEDIUM) — Palo Alto Networks Advisories, 2026-10-14
- CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM) — Palo Alto Networks Advisories, 2026-10-02