Palo Alto Networks - vulnerabilities (CVEs)

354 CVEs in 52 products, 13 in the last 30 days, newest from 2026-10-15.

Products

Pan-os - 128 CVEs
Prisma Access - 82 CVEs
Cloud Ngfw - 74 CVEs
Globalprotect App - 22 CVEs
Cortex Xdr Agent - 19 CVEs
Prisma Access Agent - 14 CVEs
Cortex Xsoar - 9 CVEs
Prisma Browser - 8 CVEs
Expedition - 7 CVEs
Globalprotect Uwp App - 7 CVEs
Panorama - 5 CVEs
Checkov By Prisma Cloud - 4 CVEs
Cortex Xdr Broker Vm - 4 CVEs
Prisma Cloud Compute - 4 CVEs
Global Protect Agent - 3 CVEs
Trust Protection Foundation - 3 CVEs
Bridgecrew Checkov - 2 CVEs
Palo Alto Networks Expedition - 2 CVEs
Palo Alto Networks Pan-os - 2 CVEs
Prisma Access Browser - 2 CVEs
Prisma Sd-wan Ion - 2 CVEs
Traps - 2 CVEs
Activemq Content Pack - 1 CVEs
Autonomous Digital Experience Manager - 1 CVEs
Broker Vm - 1 CVEs
Chronosphere Chronocollector - 1 CVEs
Compute In Prisma Cloud Enterprise Edition - 1 CVEs
Cortex Xdr - 1 CVEs
Cortex Xdr Microsoft 365 Defender Pack - 1 CVEs
Cortex Xsiam Commvaultsecurityiq Marketplace - 1 CVEs
Cortex Xsiam Microsoft Teams Marketplace - 1 CVEs
Cortex Xsiam Os Query - 1 CVEs
Cortex Xsoar Commonscripts - 1 CVEs
Cortex Xsoar Commvaultsecurityiq Marketplace - 1 CVEs
Cortex Xsoar Microsoft Teams Marketplace - 1 CVEs
Cortex Xsoar Os Query - 1 CVEs
Demisto - 1 CVEs
Expedition Migration Tool - 1 CVEs
Firewall - 1 CVEs
Global Protect Uwp App - 1 CVEs
Globalprotect - 1 CVEs
Globalprotect Agent - 1 CVEs
Globalprotect Agent For Linux And Osx - 1 CVEs
Globalprotect Agent For Windows - 1 CVEs
Idira Secrets Manager Self-hosted - 1 CVEs
Minemeld - 1 CVEs
Palo Alto Networks - 1 CVEs
Pan-os Openconfig Plugin - 1 CVEs
Prisma Sd-wan - 1 CVEs
User-id Credential Agent - 1 CVEs
Vm-series Plugin - 1 CVEs
Wildfire Wf-500 And Wf-500-b - 1 CVEs

Newest CVEs of Palo Alto Networks

CVE-2026-45165 - CVSS 8.6 (high), 2026-10-15: An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch.…
CVE-2026-0311 - CVSS 1.1 (low), 2026-10-14: A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network…
CVE-2026-0312 - CVSS 4.3 (medium), 2026-10-14: Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on…
CVE-2026-0313 - CVSS 6.1 (medium), 2026-10-14: A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute…
CVE-2026-0314 - CVSS 4.3 (medium), 2026-10-14: A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS)…
CVE-2026-0315 - CVSS 5.9 (medium), 2026-10-14: A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS.…
CVE-2026-0316 - CVSS 1.1 (low), 2026-10-14: A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a…
CVE-2026-0317 - CVSS 1.2 (low), 2026-10-14: A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of…
CVE-2026-0318 - CVSS 4.6 (medium), 2026-10-14: A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to…
CVE-2026-0319 - CVSS 4.9 (medium), 2026-10-14: An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a…
CVE-2026-0320 - CVSS 6.1 (medium), 2026-10-14: A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run…
CVE-2026-0321 - CVSS 6.6 (medium), 2026-10-14: Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service…
CVE-2026-0322 - CVSS 8.6 (high), 2026-10-14: A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network…
CVE-2026-0302 - CVSS 1.1 (low), 2026-09-10: An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes…
CVE-2026-0303 - CVSS 2.4 (low), 2026-09-10: A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains…
CVE-2026-0304 - CVSS 4.8 (medium), 2026-09-10: A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM)…
CVE-2026-0305 - CVSS 4.3 (medium), 2026-09-10: An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data…
CVE-2026-0306 - CVSS 5.8 (medium), 2026-09-10: A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured…
CVE-2026-0307 - CVSS 5.9 (medium), 2026-09-10: Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT…
CVE-2026-0308 - CVSS 1.1 (low), 2026-09-10: A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a…
CVE-2026-0309 - CVSS 4 (medium), 2026-09-10: A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run…
CVE-2026-0310 - CVSS 7.2 (high), 2026-09-10: A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network…
CVE-2026-0301 - CVSS 7.5 (high), 2026-08-13: An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network…
CVE-2026-0299 - CVSS 7.8 (high), 2026-08-13: Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT…
CVE-2026-0298 - CVSS 8.1 (high), 2026-08-13: An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on…
CVE-2026-0297 - CVSS 8.1 (high), 2026-08-13: A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to…
CVE-2026-0296 - CVSS 7.4 (high), 2026-08-13: Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM)…
CVE-2026-0295 - CVSS 7 (high), 2026-08-13: A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges…
CVE-2026-0294 - CVSS 7.8 (high), 2026-08-13: A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code…
CVE-2026-0293 - CVSS 6 (medium), 2026-08-13: A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper…