Login Request a demo
PA
Network Security
PAN-OS
by Palo Alto Networks · last CVE Oct 21, 2026
On CISA KEVExploited in the wildRansomware-linked
290
CVEs
17
On KEV
10.0
Max CVSS
9
New 30D
Vulnerabilities290In the news12Timeline
Severity mix
Critical 28High 116Medium 107Low 18
Severity
All severities290Critical28High116Medium107Low18
Exploitation
On CISA KEV17Exploited in the wild17
Watch

Add PAN-OS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-3400
RansomwareIn wildKEV
10.0
100%
Apr 12
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
Affected: 10.2.0 before 10.2.9-h1; 11.0.0 before 11.0.4-h1; 11.1.0 before 11.1.2-h3
CVE-2020-2021
RansomwareIn wildKEV
10.0
4%
Jun 29
PAN-OS: Authentication Bypass in SAML Authentication
Affected: 8.0.*; 8.1 before 8.1.15; 9.0 before 9.0.9; 9.1 before 9.1.3
CVE-2026-109618
In wildKEV
9.8
100%
Oct 21
RCE via OOM corruption
Affected: 10.2.0 before 10.2.7; 10.2.7; 10.2.7; 10.2.7; 10.2.7; 10.2.7; +34 more
CVE-2026-0300
In wildKEV
9.8
42%
May 6
PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal
Affected: 12.1.0 before 12.1.7; 11.2.0 before 11.2.12; 11.1.0 before 11.1.15; 10.2.0 before 10.2.18-h6
CVE-2024-0012
RansomwareIn wildKEV
9.8
100%
Nov 18
PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
Affected: 11.2.0 before 11.2.4-h1; 11.1.0 before 11.1.5-h1; 11.0.0 before 11.0.6-h1; 10.2.0 before 10.2.12-h2
CVE-2017-15944
In wildKEV
9.8
98%
Dec 11
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
Affected: before 6.1.19; 7.0.0 before 7.0.19; 7.1.0 before 7.1.14; 8.0.0 before 8.0.6
CVE-2026-0257
RansomwareIn wildKEV
9.1
95%
May 13
PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
Affected: 12.1.0 before 12.1.7, 12.1.4-h6; 11.2.0 before 11.2.12, 11.2.10-h7, 11.2.7-h14, 11.2.4-h17; 11.1.0 before 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33; 10.2.0 before 10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34
CVE-2025-0108
In wildKEV
9.1
98%
Feb 12
PAN-OS: Authentication Bypass in the Management Web Interface
Affected: 10.1.0 before 10.1.14-h9; 10.2.0 before 10.2.7-h24; 11.1.0 before 11.1.6-h1; 11.2.0 before 11.2.4-h4
Showing 8