Palo Alto PAN-OS vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
98 matching records
- Medium4.0CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration (Severity: MEDIUM)Check if you run itEPSS 0.78%Sep 9, 2026
- Low1.1CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: LOW)Check if you run itEPSS 0.51%Sep 9, 2026
- UnknownCVE-2026-0306 Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows (Severity: MEDIUM)Check if you run itEPSS 0.15%Sep 9, 2026
- UnknownCVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux (Severity: MEDIUM)Check if you run itEPSS 0.14%Sep 9, 2026
- UnknownCVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability (Severity: MEDIUM)Check if you run itEPSS 0.34%Sep 9, 2026
- UnknownCVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File (Severity: LOW)Check if you run itEPSS 0.18%Sep 9, 2026
- Low1.7An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obta…Check if you run itEPSS 0.56%Aug 13, 2026
- Medium4.9A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN IO…Check if you run itEPSS 0.17%May 13, 2026
- Medium6.6Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (D…Check if you run itEPSS 0.36%May 13, 2026
- Medium6.1Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary…Check if you run itEPSS 1.40%May 13, 2026
- Medium5.0An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables users to read sensitive information and delete a…Check if you run itEPSS 0.34%May 13, 2026
- Medium4.8A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the f…Check if you run itEPSS 0.33%May 13, 2026
- Medium4.4A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload…Check if you run itEPSS 0.16%May 13, 2026
- Medium5.9Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM…Check if you run itEPSS 0.18%May 13, 2026
- Medium5.2CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM)Check if you run itEPSS 0.39%May 13, 2026
- Medium4.9Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and pot…Check if you run itEPSS 0.11%May 13, 2026
- Medium5.9A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally authenticated non-administrative user to escalat…Check if you run itEPSS 0.15%May 13, 2026
- Medium5.2An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller.Check if you run itEPSS 0.22%May 13, 2026
- Low1.1A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields.Check if you run itEPSS 0.10%May 13, 2026
- High7.3A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authent…Check if you run itEPSS 0.16%May 13, 2026
- Medium5.8A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies.Check if you run itEPSS 0.11%May 13, 2026
- High7.2An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls…Check if you run itEPSS 1.05%May 13, 2026
- High7.2A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access…Check if you run itEPSS 0.47%May 13, 2026
- High7.2A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary co…Check if you run itEPSS 0.37%May 13, 2026
- High7.3An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge.Check if you run itEPSS 0.15%May 13, 2026