paloaltonetworks

348 tracked vulnerabilities.

CVE-2026-0269 MEDIUM
PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing
Jun 10, 2026
CVSS 5.7
EPSS 0.00
CVE-2026-0268 MEDIUM
Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux
Jun 10, 2026
CVSS 4.4
EPSS 0.00
CVE-2026-0267 MEDIUM
GlobalProtect App: Information Exposure Vulnerability on macOS
Jun 10, 2026
CVSS 5.5
EPSS 0.00
CVE-2026-0266 MEDIUM
Palo Alto Networks Cloud Ngfw - XSS
Jun 10, 2026
CVSS 4.8
EPSS 0.00
CVE-2026-0257 CRITICAL KEVNUCLEI
PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
May 13, 2026
CVSS 9.1
EPSS 0.87
CVE-2026-0241 HIGH
Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities
May 13, 2026
CVSS 7.2
EPSS 0.00
CVE-2026-0240 HIGH
Trust Protection Foundation: Sensitive Information Disclosure Vulnerability
May 13, 2026
CVSS 8.7
EPSS 0.00
CVE-2026-0239 MEDIUM
Chronosphere Chronocollector Information Disclosure Vulnerability
May 13, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-0238 LOW
Broker VM: Improper Input Validation in Broker VM Certificate and Key Fields
May 13, 2026
CVSS 3.2
EPSS 0.00
CVE-2026-0236 HIGH
Prisma Browser: Code Injection Enables Security Controls Bypass
May 13, 2026
CVSS 7.8
EPSS 0.00
CVE-2026-0300 CRITICAL KEV
Palo Alto PAN-OS User-ID Authentication Portal - Unauthenticated Root RCE
May 06, 2026
CVSS 9.8
EPSS 0.32
CVE-2026-0234 CRITICAL
Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration
Apr 13, 2026
CVSS 9.1
EPSS 0.00
CVE-2026-0233 HIGH
Autonomous Digital Experience Manager: Improper validation of ADEM certificate
Apr 13, 2026
CVSS 8.8
EPSS 0.00
CVE-2026-0232 MEDIUM
Cortex XDR Agent: Local Administrator can disable the agent on Windows
Apr 13, 2026
CVSS 4.4
EPSS 0.00
CVE-2026-0227 HIGH
Palo Alto Networks PAN-OS >= 10.1.0 < 10.1.14 - Unauthenticated Denial of Service
Jan 15, 2026
CVSS 7.5
EPSS 0.01
CVE-2025-4615 HIGH
Palo Alto Networks PAN-OS - Privilege Escalation
Oct 09, 2025
CVSS 7.2
EPSS 0.01
CVE-2025-4614 LOW
Palo Alto Networks PAN-OS - Info Disclosure
Oct 09, 2025
CVSS 2.7
EPSS 0.00
CVE-2025-4227 LOW
Palo Alto Networks GlobalProtect <6-0 - Info Disclosure
Jun 13, 2025
CVSS 3.5
EPSS 0.00
CVE-2025-4232 HIGH
Palo Alto Networks GlobalProtect <macOS - Privilege Escalation
Jun 13, 2025
CVSS 8.8
EPSS 0.00
CVE-2025-4231 HIGH
Palo Alto Networks PAN-OS - Command Injection
Jun 13, 2025
CVSS 7.2
EPSS 0.01
CVE-2025-0135 LOW
Palo Alto Networks GlobalProtect <macOS - Privilege Escalation
May 14, 2025
CVSS 3.3
EPSS 0.00
CVE-2025-0130 HIGH
Palo Alto Networks PAN-OS 11.1.0-11.1.5 and 11.2.0-11.2.4 - Unauthenticated Denial of Service via Malformed Packet Burst
May 14, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-0124 LOW
Palo Alto Networks PAN-OS - Auth Bypass
Apr 11, 2025
CVSS 3.8
EPSS 0.00
CVE-2025-0120 HIGH
Palo Alto Networks GlobalProtect < - Privilege Escalation
Apr 11, 2025
CVSS 7.0
EPSS 0.00
CVE-2025-0118 HIGH
Palo Alto Networks GlobalProtect <Windows - Privilege Escalation
Mar 12, 2025
CVSS 8.0
EPSS 0.00
Products
pan-os 226 globalprotect 35 cortex_xdr_agent 20 expedition 16 cortex_xsoar 11 prisma_access 8 prisma_cloud 4 expedition_migration_tool 3 idira_endpoint_privilege_manager 3 secdo 3 terminal_services_agent 3 traps 3 bridgecrew_checkov 2 prisma_access_agent 2 trust_protection_foundation 2 autonomous_digital_experience_manager 1 broker_vm 1 chronosphere_collector 1 cloud_ngfw 1 cortex_xsiam 1 cortex_xsiam_commvaultsecurityiq_marketplace 1 cortex_xsoar_commonscripts 1 cortex_xsoar_commvaultsecurityiq_marketplace 1 demisto 1 idira_identity_browser_extension 1 idira_privilege_cloud_connector 1 idira_privileged_access_manager_vault 1 idira_privileged_session_manager 1 idira_privileged_session_manager_for_ssh 1 idira_secrets_manager 1
Quick Filters
Critical CVEs With Exploits In CISA KEV