Palo Alto PAN-OS security vulnerabilities
Firewall. Public CVE monitoring for Palo Alto PAN-OS. Vendor security advisories are linked on this page.
Built for Operators of this product.
98 public records · 0 security-fix timeline events. 0 published in the last 7 days. 54 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 5
- High 2
- Medium 10
- Low 5
2026-08-0522 issues2026-11-02
Known exploited
View all known exploited- Critical9.2PHP PHP Use After FreePatch nowKEVEPSS 100.00%Oct 21, 2026
- Critical9.2PHP PHP Use After FreePatch nowKEVEPSS 100.00%Oct 21, 2026
- High7.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 95.01%May 13, 2026
- Critical9.8Out-of-Bounds Write in Google Brotli DecoderPatch nowKEVEPSS 82.64%Oct 22, 2026
- Critical10.0Ahsay AhsayCBS Command Injection VulnerabilityPatch nowKEVEPSS 81.76%Oct 4, 2026
- Medium6.9Ahsay AhsayCBS Improper Authentication VulnerabilityPatch nowKEVEPSS 79.47%Oct 4, 2026
- High7.7Palo Alto Networks Expedition Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 78.42%Jan 11, 2025
- Critical9.3Palo Alto Networks PAN-OS Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 41.71%May 5, 2026
Recently published
Browse catalog- Critical9.8Out-of-Bounds Write in Google Brotli DecoderPatch nowKEVEPSS 82.64%Oct 22, 2026
- Critical9.2PHP PHP Use After FreePatch nowKEVEPSS 100.00%Oct 21, 2026
- Critical9.2PHP PHP Use After FreePatch nowKEVEPSS 100.00%Oct 21, 2026
- Medium6.6CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM)Check if you run itEPSS 0.33%Oct 14, 2026
- Medium6.1CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability (Severity: MEDIUM)Check if you run itEPSS 0.83%Oct 14, 2026
- Medium6.1CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM)Check if you run itEPSS 0.84%Oct 14, 2026
- Medium5.9A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS.Check if you run itEPSS 0.10%Oct 14, 2026
- Medium4.9CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability (Severity: MEDIUM)Check if you run itEPSS 0.28%Oct 14, 2026
- Medium4.6CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama (Severity: MEDIUM)Check if you run itEPSS 0.32%Oct 14, 2026
- Medium4.3Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.Check if you run itEPSS 0.14%Oct 14, 2026