Palo Alto Networks
16 CVEs in CISA KEV — 6 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2024-3400 |
PAN-OS | — | 1.0000 | 2024-04-12 | 2024-04-19 | RW | Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vul |
CVE-2024-0012 |
PAN-OS | — | 0.9979 | 2024-11-18 | 2024-12-09 | RW | Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the |
CVE-2024-9465 |
Expedition | — | 0.9963 | 2024-11-14 | 2024-12-05 | Palo Alto Networks Expedition contains a SQL injection vulnerability that allows | |
CVE-2024-9463 |
Expedition | — | 0.9855 | 2024-11-14 | 2024-12-05 | Palo Alto Networks Expedition contains an OS command injection vulnerability tha | |
CVE-2025-0108 |
PAN-OS | — | 0.9814 | 2025-02-18 | 2025-03-11 | Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its | |
CVE-2026-0257 |
PAN-OS | 7.8 | 0.9501 | 2026-05-29 | 2026-06-01 | RW | Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that a |
CVE-2024-9474 |
PAN-OS | — | 0.9375 | 2024-11-18 | 2024-12-09 | RW | Palo Alto Networks PAN-OS contains an OS command injection vulnerability that al |
CVE-2024-5910 |
Expedition | — | 0.9168 | 2024-11-07 | 2024-11-28 | Palo Alto Networks Expedition contains a missing authentication vulnerability th | |
CVE-2026-0300 |
PAN-OS | 9.3 | 0.4171 | 2026-05-06 | 2026-05-09 | Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the U | |
CVE-2024-3393 |
PAN-OS | — | 0.2912 | 2024-12-30 | 2025-01-20 | Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malici | |
CVE-2025-0111 |
PAN-OS | — | 0.0200 | 2025-02-20 | 2025-03-13 | Palo Alto Networks PAN-OS contains an external control of file name or path vuln | |
CVE-2026-0322 |
PAN-OS | — | 0.0174 | 2026-10-14 | 2026-10-17 | Palo Alto Networks PAN-OS contains a code injection vulnerability that could all | |
CVE-2022-0028 |
PAN-OS | — | — | 2022-08-22 | 2022-09-12 | A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a | |
CVE-2017-15944 |
PAN-OS | — | — | 2022-08-18 | 2022-09-08 | Palo Alto Networks PAN-OS contains multiple, unspecified vulnerabilities which c | |
CVE-2020-2021 |
PAN-OS | — | — | 2022-03-25 | 2022-04-15 | RW | Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attac |
CVE-2019-1579 |
PAN-OS | — | — | 2022-01-10 | 2022-07-10 | RW | Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gatew |