Palo Alto PAN-OS vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
98 matching records
- Medium5.2An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable theCheck if you run itEPSS 0.14%May 14, 2025
- Medium6.5A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating sysCheck if you run itEPSS 0.53%May 14, 2025
- Low1.2A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software enables execution of malicious JavaScrCheck this weekEPSS 46.30%May 14, 2025
- Medium6.9A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM.Check if you run itEPSS 0.46%May 14, 2025
- High7.1An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a localCheck if you run itEPSS 0.16%May 14, 2025
- High8.2A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated attacker to send a burst of maliciously crafted packetCheck if you run itEPSS 0.44%May 14, 2025
- High7.1Palo Alto Networks PAN-OS File Read VulnerabilityPatch nowKEVEPSS 2.00%Feb 12, 2025
- High8.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 98.45%Feb 12, 2025
- High7.7Palo Alto Networks Expedition Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 78.42%Jan 11, 2025
- High8.7Palo Alto Networks PAN-OS Malicious DNS Packet VulnerabilityPatch nowKEVEPSS 29.12%Dec 27, 2024
- Medium6.9Palo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityPatch nowKEVEPSS 93.77%Nov 18, 2024
- Critical9.3Palo Alto Networks PAN-OS Management Interface Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.79%Nov 18, 2024
- Critical9.2Palo Alto Networks Expedition SQL Injection VulnerabilityPatch nowKEVEPSS 99.63%Oct 9, 2024
- Critical9.9Palo Alto Networks Expedition OS Command Injection VulnerabilityPatch nowKEVEPSS 98.55%Oct 9, 2024
- Critical9.3Palo Alto Networks Expedition Missing Authentication VulnerabilityPatch nowKEVEPSS 91.68%Jul 10, 2024
- Critical10.0Palo Alto Networks PAN-OS Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Apr 12, 2024
- High8.6Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service VulnerabilityPatch nowKEVEPSS 2.69%Aug 10, 2022
- High8.1Palo Alto Networks PAN-OS Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.15%Jul 8, 2020
- Critical10.0Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 4.36%Jun 29, 2020
- UnknownPalo Alto Networks addresses tens of serious issues in PAN-OS Palo Alto Networks has issued security updates to address tens of vulnerabilities in PAN-OS, the software…Check if you run itEPSS 1.36%Jun 22, 2020
- High8.1Palo Alto Networks PAN-OS Remote Code Execution VulnerabilityPatch nowKEVEPSS 44.16%Jul 19, 2019
- Critical9.8Palo Alto Networks PAN-OS Remote Code Execution VulnerabilityPatch nowKEVEPSS 98.34%Dec 11, 2017
- High7.0Linux Kernel Race Condition VulnerabilityPatch nowKEVEPSS 83.52%Oct 18, 2016