Palo Alto Networks vulnerabilities
364 CVEs and advisories name Palo Alto Networks as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-0292Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows
- CVE-2026-0291Prisma Access Agent: Authenticated Limited File Deletion on Linux
- CVE-2026-0290Prisma Browser: Sensitive Information Disclosure Vulnerability
- CVE-2026-0289Prisma Browser: Inappropriate Implementation in Account Protection
- CVE-2026-0275Prisma Browser: Local Privilege Escalation on macOS
- CVE-2026-0276Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability
- CVE-2026-0277Prisma Access Agent: Improper Certificate Validation on iOS
- CVE-2026-0278Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows
- CVE-2026-0279PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities
- CVE-2026-0280PAN-OS: IPv6 Firewall Policy Bypass
- CVE-2026-0281PAN-OS: Information Disclosure Vulnerability in Management Web Interface
- CVE-2026-0282PAN-OS: File Deletion Vulnerability in Management Web Interface
- CVE-2026-0283PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)
- CVE-2026-0284PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)
- CVE-2026-0285PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface
- CVE-2026-0286PAN-OS: Authenticated Command Injection in CLI
- CVE-2026-0287PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing
- CVE-2026-0288PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent
- CVE-2026-0274Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration
- CVE-2026-0273PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI
- CVE-2026-0272PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)
- CVE-2026-0271Prisma Access Agent: Local Privilege Escalation by Authorized Users
- CVE-2026-0270Cortex XSOAR: Path Traversal Vulnerability
- CVE-2026-0269PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing
- CVE-2026-0268Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux
- CVE-2026-0267GlobalProtect App: Information Exposure Vulnerability on macOS
- CVE-2026-0266PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
- CVE-2026-0243Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet
- CVE-2026-0248Prisma Access Agent: Improper Certificate Validation Vulnerability
- CVE-2026-0242Trust Protection Foundation: SQL Injection Vulnerability