Palo Alto Networks vulnerabilities
364 CVEs and advisories name Palo Alto Networks as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-0244Prisma SD-WAN: Improper Certificate Validation Vulnerability
- CVE-2026-0241Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities
- CVE-2026-0245Prisma Access Agent: Information Disclosure Vulnerabilities
- CVE-2026-0240Trust Protection Foundation: Sensitive Information Disclosure Vulnerability
- CVE-2026-0246Prisma Access Agent: Local Privilege Escalation Vulnerability
- CVE-2026-0247Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities
- CVE-2026-0249GlobalProtect App: Certificate Validation Bypass Vulnerabilities
- CVE-2026-0239Chronosphere Chronocollector Information Disclosure Vulnerability
- CVE-2026-0250GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway
- CVE-2026-0238Broker VM: Improper Input Validation in Broker VM Certificate and Key Fields
- CVE-2026-0251GlobalProtect App: Local Privilege Escalation Vulnerabilities
- CVE-2026-0256PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
- CVE-2026-0257PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
- CVE-2026-0235Prisma Browser: Access and Data Rule Bypass
- CVE-2026-0258PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching
- CVE-2026-0259WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)
- CVE-2026-0261PAN-OS: Authenticated Admin Command Injection Vulnerability
- CVE-2026-0236Prisma Browser: Code Injection Enables Security Controls Bypass
- CVE-2026-0262PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing
- CVE-2026-0237Prisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass
- CVE-2026-0263PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing
- CVE-2026-0264PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution
- CVE-2026-0265PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled
- CVE-2026-0300PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal
- CVE-2026-0232Cortex XDR Agent: Local Administrator can disable the agent on Windows
- CVE-2026-0233Autonomous Digital Experience Manager: Improper validation of ADEM certificate
- CVE-2026-0234Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration
- CVE-2026-0231Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability
- CVE-2026-0230Cortex XDR Agent: Local Administrator can disable the agent on macOS
- CVE-2026-0229PAN-OS: Denial of Service in Advanced DNS Security Feature