Palo Alto Networks vulnerabilities
364 CVEs and advisories name Palo Alto Networks as an affected vendor, 14 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-0322PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
- CVE-2026-0257PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
- CVE-2026-0300PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal
- CVE-2025-0111PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface
- CVE-2025-0108PAN-OS: Authentication Bypass in the Management Web Interface
- CVE-2024-3393PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet
- CVE-2024-9474PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
- CVE-2024-0012PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
- CVE-2024-9465Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure
- CVE-2024-9463Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
- CVE-2024-5910Expedition: Missing Authentication Leads to Admin Account Takeover
- CVE-2024-3400PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
- CVE-2022-0028PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering
- CVE-2020-2021PAN-OS: Authentication Bypass in SAML Authentication