Palo Alto Networks vulnerabilities
364 CVEs and advisories name Palo Alto Networks as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-0228PAN-OS: Improper Validation of Terminal Server Agent Certificate
- CVE-2026-0227PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal
- CVE-2025-4618Prisma Browser: Sensitive Information Disclosure Vulnerability in Prisma Browser
- CVE-2025-4617Prisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma Browser
- CVE-2025-4616Prisma Browser: Insufficient Validation of Untrusted Input Vulnerability in Prisma Browser
- CVE-2025-4619PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Packets
- CVE-2025-4615PAN-OS: Improper Neutralization of Input in the Management Web Interface
- CVE-2025-4614PAN-OS: Session Token Disclosure Vulnerability
- CVE-2025-4234Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials
- CVE-2025-4235User-ID Credential Agent: Cleartext Exposure of Service Account password
- CVE-2025-2184Cortex XDR Broker VM: Secrets Shared Across Multiple Broker VM Images
- CVE-2025-2183GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation
- CVE-2025-2182PAN-OS: Firewall Clusters using the MACsec Protocol Expose the Connectivity Association Key (CAK)
- CVE-2025-2181Checkov by Prisma Cloud: Cleartext Exposure of Credentials
- CVE-2025-2180Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution
- CVE-2025-2179GlobalProtect App: Non Admin User Can Disable the GlobalProtect App
- CVE-2025-0141GlobalProtect App: Privilege Escalation (PE) Vulnerability
- CVE-2025-0140GlobalProtect App: Non Admin User Can Disable the GlobalProtect App
- CVE-2025-0139Autonomous Digital Experience Manager: Privilege Escalation (PE) Vulnerability
- CVE-2025-4227GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement
- CVE-2025-4229PAN-OS: Traffic Information Disclosure Vulnerability
- CVE-2025-4228Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability
- CVE-2025-4230PAN-OS: Authenticated Admin Command Injection Vulnerability Through CLI
- CVE-2025-4231PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web Interface
- CVE-2025-4232GlobalProtect: Authenticated Code Injection Through Wildcard on macOS
- CVE-2025-4233Prisma Access Browser: Inappropriate implementation in Cache
- CVE-2025-0136PAN-OS: Unencrypted Data Transfer when using AES-128-CCM on Intel-based hardware devices
- CVE-2025-0138Prisma Cloud Compute Edition: Insufficient Session Expiration Vulnerability in the Web Interface
- CVE-2025-0137PAN-OS: Improper Neutralization of Input in the Management Web Interface
- CVE-2025-0135GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App