Palo Alto PAN-OS vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
98 matching records
- High7.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 95.01%May 13, 2026
- Critical9.3Palo Alto Networks PAN-OS Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 41.71%May 5, 2026
- Low2.0A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network…Check if you run itEPSS 0.18%Apr 13, 2026
- Medium4.0A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent.Check if you run itEPSS 0.15%Apr 13, 2026
- Medium5.7An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to obtain and modify sensitive information by triggeri…Check if you run itEPSS 0.17%Mar 11, 2026
- Medium4.0A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on macOS allows a local administrator to disable the agent.Check if you run itEPSS 0.14%Mar 11, 2026
- Medium6.6A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall.Check if you run itEPSS 0.74%Jan 15, 2026
- Low2.7In Splunk Add-on for Palo Alto Networks versions below 2.0.2, the add-on exposes client secrets in plain text in the _internal index during the addition of new “Data Security AccouCheck if you run itEPSS 0.24%Nov 26, 2025
- Medium4.4A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to retrieve sensitive data from Prisma Browser.Check if you run itEPSS 0.09%Nov 14, 2025
- Low1.1An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feaCheck if you run itEPSS 0.14%Nov 14, 2025
- Low1.1An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to revert the browser’s securityCheck if you run itEPSS 0.12%Nov 14, 2025
- Medium6.6A denial-of-service (DoS) vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to reboot a firewall by sending a specially crafted packet throughCheck if you run itEPSS 0.59%Nov 13, 2025
- Medium5.5An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system reCheck if you run itEPSS 0.78%Oct 9, 2025
- Medium4.8An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users authenticated to the firewallCheck if you run itEPSS 0.26%Oct 9, 2025
- Low2.4A problem with the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack can result in exposure of user credentials in application logs.Check if you run itEPSS 0.14%Sep 12, 2025
- High7.2An information exposure vulnerability in the Palo Alto Networks User-ID Credential Agent (Windows-based) can expose the service account password under specific non-default configurCheck if you run itEPSS 0.18%Sep 12, 2025
- Medium5.3A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share identical default credentials for internal services.Check if you run itEPSS 0.17%Aug 13, 2025
- Medium5.6A problem with the implementation of the MACsec protocol in Palo Alto Networks PAN-OS® results in the cleartext exposure of the connectivity association key (CAK).Check if you run itEPSS 0.12%Aug 13, 2025
- Medium5.9A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's outputCheck if you run itEPSS 0.16%Aug 13, 2025
- Medium4.8An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanniCheck if you run itEPSS 0.18%Aug 13, 2025
- Medium6.8An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable theCheck if you run itEPSS 0.15%Jul 9, 2025
- Medium6.3An incorrect privilege assignment vulnerability in Palo Alto Networks Autonomous Digital Experience Manager allows a locally authenticated low privileged user on macOS endpoints toCheck if you run itEPSS 0.15%Jul 9, 2025
- Medium5.3Using the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks PAN-OS® firewalls (PA-7500, PA-5400, PA-5400f, PA-3400, PA-1600, PA-1400, and PA-400 Series) leads to unencrCheck if you run itEPSS 0.17%May 14, 2025
- Low2.0Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are deleted, which makes Prisma Cloud Compute Edition susceptible toCheck if you run itEPSS 0.37%May 14, 2025
- Medium4.8An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administratorCheck if you run itEPSS 0.42%May 14, 2025