CveMateVulnerability intelligence

Palo Alto Networks vulnerabilities

365 vulnerabilities

Known vulnerabilities in Palo Alto Networks products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 54 products.

Products

50 of 54

PAN OS192 vulnerabilities
Globalprotect App41 vulnerabilities
Cortex XDR Agent24 vulnerabilities
Prisma Access24 vulnerabilities
Prisma Access Agent14 vulnerabilities
Expedition12 vulnerabilities
Cortex Xsoar11 vulnerabilities
Cortex XDR Broker VM9 vulnerabilities
Prisma Browser9 vulnerabilities
Cloud NG7 vulnerabilities
Checkov By Prisma Cloud6 vulnerabilities
Prisma Cloud Compute4 vulnerabilities
Global Protect Agent3 vulnerabilities
Traps3 vulnerabilities
Trust Protection Foundation3 vulnerabilities
Autonomous Digital Experience Manager2 vulnerabilities
Bridgecrew Checkov2 vulnerabilities
Palo Alto Networks Expedition2 vulnerabilities
Palo Alto Networks PAN OS2 vulnerabilities
Prisma Access Browser2 vulnerabilities
Prisma SD WAN ION2 vulnerabilities
Activemq Content Pack1 vulnerabilities
Broker VM1 vulnerabilities
Chronosphere Chronocollector1 vulnerabilities
Cortex XDR Microsoft 365 Defender Pack1 vulnerabilities
Cortex Xsiam Commvaultsecurityiq Marketplace1 vulnerabilities
Cortex Xsiam Microsoft Teams Marketplace1 vulnerabilities
Cortex Xsiam OS Query1 vulnerabilities
Cortex Xsoar Commonscripts1 vulnerabilities
Cortex Xsoar Commvaultsecurityiq Marketplace1 vulnerabilities
Cortex Xsoar Microsoft Teams Marketplace1 vulnerabilities
Cortex Xsoar OS Query1 vulnerabilities
Demisto1 vulnerabilities
Expedition Migration Tool1 vulnerabilities
Firewall1 vulnerabilities
Globalprotect1 vulnerabilities
Globalprotect Agent1 vulnerabilities
Globalprotect Agent For Linux And OSX1 vulnerabilities
Globalprotect Agent For Windows1 vulnerabilities
Globalprotect UWP App1 vulnerabilities
Idira Secrets Manager (Self Hosted)1 vulnerabilities
Minemeld1 vulnerabilities
Palo Alto Networks1 vulnerabilities
PAN OS Openconfig Plugin1 vulnerabilities
Prisma Cloud Compute Edition1 vulnerabilities
Prisma SD WAN1 vulnerabilities
VM Series Plugin1 vulnerabilities
Wildfire WF 500 And WF 500 B1 vulnerabilities
Compute In Prisma Cloud Enterprise Edition0 vulnerabilities
Cortex XDR0 vulnerabilities

CVE-2026-45165palo alto networksidira secrets manager (self-hosted)5d ago15-10-2026 19:00

An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.CVE-2026-0321palo alto networkspan-os+16d ago14-10-2026 19:58

Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode. Cloud NGFW and Panorama are not affected by this vulnerability.CVE-2026-0320palo alto networkspan-os6d ago14-10-2026 20:09

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security risk posed by this issue is significantly minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not affected by this vulnerability.CVE-2026-0319palo alto networkspan-os+16d ago14-10-2026 20:15

An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability.CVE-2026-0318palo alto networkspan-os6d ago14-10-2026 20:19

A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode. Cloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability.CVE-2026-0317palo alto networkspan-os6d ago14-10-2026 20:21

A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service (DoS) condition by sending a specially crafted API request. The security risk posed by this issue is significantly minimized by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Cloud NGFW, Panorama, and Prisma® Access are not affected by this vulnerability.CVE-2026-0316palo alto networkspan-os6d ago14-10-2026 20:23

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS® software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not affected by these vulnerabilities.CVE-2026-0315palo alto networksglobalprotect app6d ago14-10-2026 20:24

A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.CVE-2026-0314palo alto networksglobalprotect app6d ago14-10-2026 20:25

A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.CVE-2026-0313palo alto networkscortex xsiam os query+16d ago14-10-2026 20:27

A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.CVE-2026-0312palo alto networkscheckov by prisma cloud6d ago14-10-2026 20:28

Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.CVE-2026-0311palo alto networkscheckov by prisma cloud6d ago14-10-2026 20:29

A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.CVE-2026-0322palo alto networkspan-os+1KEV7d ago14-10-2026 17:26

A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.CVE-2018-10141palo alto networkspalo alto networks+18y ago12-10-2018 22:00

GlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an unauthenticated attacker to inject arbitrary JavaScript or HTML.CVE-2018-10142palo alto networkspalo alto networks expedition+17y ago27-11-2018 21:00

The Expedition Migration tool 1.0.106 and earlier may allow an unauthenticated attacker to enumerate files on the operating system.CVE-2018-10143palo alto networkspalo alto networks expedition+17y ago12-12-2018 00:00

The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application.CVE-2018-10140palo alto networkspan-os+18y ago16-08-2018 18:00

The PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may allow an authenticated user to shut down all management sessions, resulting in all logged in users to be redirected to the login page. PAN-OS 6.1, PAN-OS 7.1 and PAN-OS 8.0 are NOT affected.CVE-2018-10139palo alto networkspan-os+18y ago16-08-2018 18:00

The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier, PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. PAN-OS 8.1 is NOT affected.CVE-2021-3055palo alto networkspan-os+15y ago08-09-2021 17:10

An improper restriction of XML external entity (XXE) reference vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file system and send a specifically crafted request to the firewall that causes the service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14; PAN-OS 9.1 versions earlier than PAN-OS 9.1.10; PAN-OS 10.0 versions earlier than PAN-OS 10.0.6. This issue does not affect Prisma Access.CVE-2021-3034palo alto networkscortex xsoar+15y ago10-03-2021 18:10

An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the private key and identity provider certificate used to configure the SAML SSO integration. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 98622; Cortex XSOAR 6.0.1 builds earlier than 830029; Cortex XSOAR 6.0.2 builds earlier than 98623; Cortex XSOAR 6.1.0 builds earlier than 848144.