Paloaltonetworks - vulnerabilities (CVEs)

404 CVEs in 148 products, 3 in the last 30 days, newest from 2026-10-21.

Products

Pan-os - 249 CVEs
Globalprotect - 43 CVEs
Cortex Xdr Agent - 22 CVEs
Expedition - 16 CVEs
Cortex Xsoar - 12 CVEs
Prisma Access Agent - 12 CVEs
Prisma Access - 9 CVEs
Prisma Browser - 6 CVEs
Globalprotect App - 5 CVEs
Prisma Cloud - 4 CVEs
Cloud Ngfw - 3 CVEs
Cortex Xdr Broker Vm - 3 CVEs
Expedition Migration Tool - 3 CVEs
Idira Endpoint Privilege Manager - 3 CVEs
Secdo - 3 CVEs
Terminal Services Agent - 3 CVEs
Traps - 3 CVEs
Bridgecrew Checkov - 2 CVEs
Panorama Virtual Appliance - 2 CVEs
Prisma Sd-wan - 2 CVEs
Trust Protection Foundation - 2 CVEs
Autonomous Digital Experience Manager - 1 CVEs
Broker Vm - 1 CVEs
Chronosphere Collector - 1 CVEs
Cortex Xsiam - 1 CVEs
Cortex Xsiam Commvaultsecurityiq Marketplace - 1 CVEs
Cortex Xsoar Commonscripts - 1 CVEs
Cortex Xsoar Commvaultsecurityiq Marketplace - 1 CVEs
Demisto - 1 CVEs
Idira Identity Browser Extension - 1 CVEs
Idira Privilege Cloud Connector - 1 CVEs
Idira Privileged Access Manager Vault - 1 CVEs
Idira Privileged Session Manager - 1 CVEs
Idira Privileged Session Manager For Ssh - 1 CVEs
Idira Secrets Manager - 1 CVEs
Idira Secrets Manager Credential Providers - 1 CVEs
Idira Secrets Manager Edge - 1 CVEs
Minemeld - 1 CVEs
Netconnect - 1 CVEs
Prisma Cloud Compute Edition - 1 CVEs
Twistlock - 1 CVEs
Vm-series - 1 CVEs
Firewall - 0 CVEs
Ion 1200 - 0 CVEs
Ion 1200-c-na - 0 CVEs
Ion 1200-c-row - 0 CVEs
Ion 1200-c5g-ww - 0 CVEs
Ion 1200-s - 0 CVEs
Ion 1200-s-c-na - 0 CVEs
Ion 1200-s-c-row - 0 CVEs
Ion 1200-s-c5g-ww - 0 CVEs
Ion 3102v - 0 CVEs
Ion 3104v - 0 CVEs
Ion 3108v - 0 CVEs
Ion 3200 - 0 CVEs
Ion 3200h - 0 CVEs
Ion 3200h-c5g-ww - 0 CVEs
Ion 5200 - 0 CVEs
Ion 7108v - 0 CVEs
Ion 7116v - 0 CVEs
Ion 9200 - 0 CVEs
M-100 - 0 CVEs
M-200 - 0 CVEs
M-500 - 0 CVEs
M-600 - 0 CVEs
Pa-1410 - 0 CVEs
Pa-1420 - 0 CVEs
Pa-200 - 0 CVEs
Pa-2020 - 0 CVEs
Pa-2050 - 0 CVEs
Pa-220 - 0 CVEs
Pa-220r - 0 CVEs
Pa-3020 - 0 CVEs
Pa-3050 - 0 CVEs
Pa-3060 - 0 CVEs
Pa-3220 - 0 CVEs
Pa-3250 - 0 CVEs
Pa-3260 - 0 CVEs
Pa-3410 - 0 CVEs
Pa-3420 - 0 CVEs
Pa-3430 - 0 CVEs
Pa-3440 - 0 CVEs
Pa-410 - 0 CVEs
Pa-410r - 0 CVEs
Pa-410r-5g - 0 CVEs
Pa-415 - 0 CVEs
Pa-415-5g - 0 CVEs
Pa-440 - 0 CVEs
Pa-445 - 0 CVEs
Pa-450 - 0 CVEs
Pa-450r - 0 CVEs
Pa-450r-5g - 0 CVEs
Pa-455 - 0 CVEs
Pa-455-5g - 0 CVEs
Pa-455r-5g - 0 CVEs
Pa-460 - 0 CVEs
Pa-500 - 0 CVEs
Pa-501 - 0 CVEs
Pa-5020 - 0 CVEs
Pa-505 - 0 CVEs
Pa-5050 - 0 CVEs
Pa-5060 - 0 CVEs
Pa-510 - 0 CVEs
Pa-520 - 0 CVEs
Pa-5200 - 0 CVEs
Pa-5220 - 0 CVEs
Pa-5250 - 0 CVEs
Pa-5260 - 0 CVEs
Pa-5280 - 0 CVEs
Pa-540 - 0 CVEs
Pa-5410 - 0 CVEs
Pa-5420 - 0 CVEs
Pa-5430 - 0 CVEs
Pa-5440 - 0 CVEs
Pa-5445 - 0 CVEs
Pa-545-poe - 0 CVEs
Pa-5450 - 0 CVEs
Pa-550 - 0 CVEs
Pa-5540 - 0 CVEs
Pa-555-poe - 0 CVEs
Pa-5550 - 0 CVEs
Pa-5560 - 0 CVEs
Pa-5570 - 0 CVEs
Pa-5580 - 0 CVEs
Pa-560 - 0 CVEs
Pa-7000 - 0 CVEs
Pa-7050 - 0 CVEs
Pa-7080 - 0 CVEs
Pa-7500 - 0 CVEs
Pa-7500-dpc-a - 0 CVEs
Pa-800 - 0 CVEs
Pa-820 - 0 CVEs
Pa-850 - 0 CVEs
Panorama M-200 - 0 CVEs
Panorama M-300 - 0 CVEs
Panorama M-500 - 0 CVEs
Panorama M-600 - 0 CVEs
Panorama M-700 - 0 CVEs
Vm-100 - 0 CVEs
Vm-1000-hv - 0 CVEs
Vm-200 - 0 CVEs
Vm-300 - 0 CVEs
Vm-50 - 0 CVEs
Vm-500 - 0 CVEs
Vm-700 - 0 CVEs
Vm-series Firewall - 0 CVEs
Wf-500 - 0 CVEs
Wf-500-b - 0 CVEs

Newest CVEs of Paloaltonetworks

CVE-2026-109619 - CVSS 9.2 (critical), 2026-10-21: PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated…
CVE-2026-109618 - CVSS 9.8 (critical), 2026-10-21: PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for…
CVE-2026-0322 - CVSS 8.6 (high), 2026-10-14: A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network…
CVE-2026-0301 - CVSS 7.5 (high), 2026-08-13: An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network…
CVE-2026-0299 - CVSS 7.8 (high), 2026-08-13: Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT…
CVE-2026-0298 - CVSS 8.1 (high), 2026-08-13: An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on…
CVE-2026-0297 - CVSS 8.1 (high), 2026-08-13: A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to…
CVE-2026-0296 - CVSS 7.4 (high), 2026-08-13: Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM)…
CVE-2026-0295 - CVSS 7 (high), 2026-08-13: A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges…
CVE-2026-0294 - CVSS 7.8 (high), 2026-08-13: A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code…
CVE-2026-0293 - CVSS 6 (medium), 2026-08-13: A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper…
CVE-2026-0292 - CVSS 6 (medium), 2026-08-13: An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass…
CVE-2026-0291 - CVSS 4.4 (medium), 2026-08-13: An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low…
CVE-2026-0290 - CVSS 5.5 (medium), 2026-08-13: An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data.
CVE-2026-0289 - CVSS 6.5 (medium), 2026-08-13: A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls.
CVE-2026-0275 - CVSS 6.7 (medium), 2026-07-09: A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local…
CVE-2026-0276 - CVSS 7.8 (high), 2026-07-09: A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a locally authenticated user to perform actions as the root user.
CVE-2026-0277 - CVSS 5.9 (medium), 2026-07-09: An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a man-in-the-middle (MitM) attack to…
CVE-2026-0278 - CVSS 7.8 (high), 2026-07-09: Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy…
CVE-2026-0279 - CVSS 6.1 (medium), 2026-07-09: Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and…
CVE-2026-0280 - CVSS 7.2 (high), 2026-07-09: An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall…
CVE-2026-0281 - CVSS 7.1 (high), 2026-07-09: An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web…
CVE-2026-0282 - CVSS 6.5 (medium), 2026-07-09: A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface…
CVE-2026-0283 - CVSS 7.2 (high), 2026-07-09: An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access…
CVE-2026-0284 - CVSS 9.9 (critical), 2026-07-09: An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with…
CVE-2026-0285 - CVSS 4.9 (medium), 2026-07-09: A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the…
CVE-2026-0286 - CVSS 7.2 (high), 2026-07-09: A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary…
CVE-2026-0287 - CVSS 7.5 (high), 2026-07-09: Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of…
CVE-2026-0288 - CVSS 7.5 (high), 2026-07-08: Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component of Palo Alto Networks PAN-OS software allow an unauthenticated…
CVE-2026-45169 - CVSS 8.7 (high), 2026-06-12: Idira Privileged Access Manager (PAM) Self-Hosted Vault versions prior to 15.0.3, 14.6.5, 14.2.7, and 14.0.8 exhibit a validation vulnerability. Under…