Palo Alto PAN-OS vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
98 matching records
- Critical9.8Out-of-Bounds Write in Google Brotli DecoderPatch nowKEVEPSS 82.64%Oct 22, 2026
- Critical9.2PHP PHP Use After FreePatch nowKEVEPSS 100.00%Oct 21, 2026
- Critical9.2PHP PHP Use After FreePatch nowKEVEPSS 100.00%Oct 21, 2026
- Low1.2CVE-2026-0317 PAN-OS: Denial of Service Vulnerability (Severity: LOW)Check if you run itEPSS 0.30%Oct 14, 2026
- Medium6.6CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM)Check if you run itEPSS 0.33%Oct 14, 2026
- Medium6.1CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM)Check if you run itEPSS 0.84%Oct 14, 2026
- Medium4.9CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability (Severity: MEDIUM)Check if you run itEPSS 0.28%Oct 14, 2026
- Medium4.6CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama (Severity: MEDIUM)Check if you run itEPSS 0.32%Oct 14, 2026
- Low1.1CVE-2026-0316 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability (Severity: LOW)Check if you run itEPSS 0.27%Oct 14, 2026
- Medium5.9A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS.Check if you run itEPSS 0.10%Oct 14, 2026
- Medium4.3A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.Check if you run itEPSS 0.10%Oct 14, 2026
- Medium6.1CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability (Severity: MEDIUM)Check if you run itEPSS 0.83%Oct 14, 2026
- Medium4.3Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.Check if you run itEPSS 0.14%Oct 14, 2026
- Low1.1CVE-2026-0311 Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability (Severity: LOW)Check if you run itEPSS 0.11%Oct 14, 2026
- Critical9.8Cisco Secure Email Gateway Relative Path Traversal VulnerabilityPatch nowKEVEPSS 2.15%Oct 14, 2026
- High8.6Palo Alto Networks PAN-OS Code Injection VulnerabilityPatch nowKEVEPSS 1.74%Oct 14, 2026
- Critical10.0Ahsay AhsayCBS Command Injection VulnerabilityPatch nowKEVEPSS 81.76%Oct 4, 2026
- Medium6.9Ahsay AhsayCBS Improper Authentication VulnerabilityPatch nowKEVEPSS 79.47%Oct 4, 2026
- UnknownCVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)Check if you run itEPSS 0.16%Sep 30, 2026
- UnknownCVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)Check if you run itEPSS 0.17%Sep 12, 2026
- UnknownCVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM)Check if you run itEPSS 0.66%Sep 12, 2026
- UnknownCVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)Check if you run itEPSS 0.60%Sep 12, 2026
- UnknownCVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)Check if you run itEPSS 0.26%Sep 12, 2026
- UnknownCVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)Check if you run itEPSS 0.11%Sep 12, 2026
- High7.2CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing (Severity: HIGH)Check if you run itEPSS 0.67%Sep 9, 2026