Palo Alto Networks vulnerabilities
364 CVEs and advisories name Palo Alto Networks as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-45165Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API
- CVE-2026-0311Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability
- CVE-2026-0312Checkov by Prisma Cloud: Path Traversal Vulnerabilities
- CVE-2026-0313Cortex XSOAR: OS Command Injection Vulnerability
- CVE-2026-0314GlobalProtect App: Local Denial of Service (DoS) on Windows
- CVE-2026-0315GlobalProtect App: Local Privilege Escalation Vulnerability on macOS
- CVE-2026-0316PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability
- CVE-2026-0317PAN-OS: Denial of Service Vulnerability
- CVE-2026-0318PAN-OS: Denial of Service (DoS) on Panorama
- CVE-2026-0319PAN-OS: Improper Input Handling Vulnerability
- CVE-2026-0320PAN-OS: Authenticated Admin Command Injection Vulnerability
- CVE-2026-0321PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services
- CVE-2026-0322PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
- CVE-2026-0302Checkov by Prisma Cloud: OS Command Injection Vulnerability
- CVE-2026-0303Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File
- CVE-2026-0304Cortex XDR Broker VM: Privilege Escalation Vulnerability
- CVE-2026-0305Prisma Access Agent: Information Disclosure Vulnerability on Linux
- CVE-2026-0306Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows
- CVE-2026-0307GlobalProtect App: Local Privilege Escalation Vulnerabilities
- CVE-2026-0308PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
- CVE-2026-0309PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration
- CVE-2026-0310PAN-OS: Buffer Overflow Vulnerability via XML Processing
- CVE-2026-0301PAN-OS: Information Disclosure Vulnerability in URL Filtering
- CVE-2026-0299GlobalProtect App: Local Privilege Escalation Vulnerabilities
- CVE-2026-0298GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)
- CVE-2026-0297GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
- CVE-2026-0296GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
- CVE-2026-0295GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
- CVE-2026-0294Prisma Access Agent: Local Privilege Escalation
- CVE-2026-0293Prisma Access Agent: Anti-Tamper Protection Bypass on Windows