Palo Alto Networks vulnerabilities
364 CVEs and advisories name Palo Alto Networks as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-0134Cortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VM
- CVE-2025-0133PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal
- CVE-2025-0132Cortex XDR Broker VM: Unauthenticated User Can Disable Internal Services
- CVE-2025-0130PAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted Packets
- CVE-2025-0129Prisma Access Browser: Inappropriate control behavior in Prisma Access Browser
- CVE-2025-0123PAN-OS: Information Disclosure Vulnerability in HTTP/2 Packet Captures
- CVE-2025-0119Cortex XDR Broker VM: Authenticated Command Injection Vulnerability in Broker VM
- CVE-2025-0128PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet
- CVE-2025-0127PAN-OS: Authenticated Admin Command Injection Vulnerability in PAN-OS VM-Series
- CVE-2025-0126PAN-OS: Session Fixation Vulnerability in GlobalProtect SAML Login
- CVE-2025-0125PAN-OS: Improper Neutralization of Input in the Management Web Interface
- CVE-2025-0124PAN-OS: Authenticated File Deletion Vulnerability on the Management Web Interface
- CVE-2025-0122Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through Burst of Crafted Packets
- CVE-2025-0121Cortex XDR Agent: Local Windows User Can Crash the Agent
- CVE-2025-0120GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
- CVE-2025-0118GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability
- CVE-2025-0117GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
- CVE-2025-0116PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame
- CVE-2025-0115PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLI
- CVE-2025-0114PAN-OS: Denial of Service (DoS) in GlobalProtect
- CVE-2025-0112Cortex XDR Agent: Local Windows User Can Disable the Agent
- CVE-2025-0113Cortex XDR Broker VM: Unauthorized Access to Broker VM Docker Containers
- CVE-2025-0110PAN-OS OpenConfig Plugin: Command Injection Vulnerability in OpenConfig Plugin
- CVE-2025-0111PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface
- CVE-2025-0109PAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web Interface
- CVE-2025-0108PAN-OS: Authentication Bypass in the Management Web Interface
- CVE-2025-0107Expedition: OS Command Injection Vulnerability
- CVE-2025-0106Expedition: Wildcard Expansion Vulnerability
- CVE-2025-0105Expedition: Arbitrary File Deletion Vulnerability
- CVE-2025-0104Expedition: Cross-Site Scripting (XSS) Vulnerability