Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low1.7An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obta…EPSS 0.3%Aug 13, 2026
- Medium4.9A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN IO…EPSS 0.2%May 13, 2026
- Medium6.6Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (D…EPSS 0.4%May 13, 2026
- Medium6.1Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary…EPSS 1.4%May 13, 2026
- Medium5.0An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables users to read sensitive information and delete a…EPSS 0.3%May 13, 2026
- Medium4.8A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the f…EPSS 0.3%May 13, 2026
- Medium4.4A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload…EPSS 0.2%May 13, 2026
- Medium5.9Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM…EPSS 0.2%May 13, 2026
- Medium5.2CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM)EPSS 0.4%May 13, 2026
- Medium4.9Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and pot…EPSS 0.1%May 13, 2026
- Medium5.9A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally authenticated non-administrative user to escalat…EPSS 0.1%May 13, 2026
- Medium5.2An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller.EPSS 0.2%May 13, 2026
- Low1.1A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields.EPSS 0.1%May 13, 2026
- High7.3A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authent…EPSS 0.2%May 13, 2026
- Medium5.8A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies.EPSS 0.1%May 13, 2026
- High7.2An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls…EPSS 1.1%May 13, 2026
- High7.2A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access…EPSS 0.5%May 13, 2026
- High7.2A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary co…EPSS 0.4%May 13, 2026
- High7.3An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge.EPSS 0.1%May 13, 2026
- High7.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityKEVEPSS 96.9%May 13, 2026
- Critical9.3Palo Alto Networks PAN-OS Out-of-bounds Write VulnerabilityKEVEPSS 31.7%May 6, 2026
- Low2.0A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network…EPSS 0.2%Apr 13, 2026
- Medium4.0A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent.EPSS 0.1%Apr 13, 2026
- Medium5.7An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to obtain and modify sensitive information by triggeri…EPSS 0.2%Mar 11, 2026
- Medium4.0A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on macOS allows a local administrator to disable the agent.EPSS 0.1%Mar 11, 2026