PA
Network Security
PAN-OS
On CISA KEVExploited in the wildRansomware-linked
288
CVEs
17
On KEV
10.0
Max CVSS
9
New 30D
Severity mix
Critical 28High 116Medium 106Low 17
Watch
Add PAN-OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1975 | 8.8 | Feb 12 | Missing XML validation vulnerability in the PAN-OS web interface on Palo Alto Networks PAN-OS software allows authenticated users to inject arbitrary XML that results in privilege… Affected: 8.1.0 before 8.1.12; 9.0.0 before 9.0.6 |
| CVE-2019-1576 | 8.8 | Jul 16 | Command injection in PAN-0S 9.0.2 and earlier may allow an authenticated attacker to gain access to a remote shell in PAN-OS, and potentially run with the escalated user’s… Affected: 9.0.0 through 9.0.2 |
| CVE-2019-1575 | 8.8 | Jul 16 | Information disclosure in PAN-OS 7.1.23 and earlier, PAN-OS 8.0.18 and earlier, PAN-OS 8.1.8-h4 and earlier, and PAN-OS 9.0.2 and earlier may allow for an authenticated user with… Affected: before 7.1.24; 8.0.0 before 8.0.19; 8.1.0 before 8.1.8; 9.0.0 through 9.0.2; 8.1.8; 8.1.8 |
| CVE-2016-4971 | 8.8 | Jun 30 | GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource Affected: 6.1.0 through 6.1.16; 7.0.0 through 7.0.14; 7.1.0 through 7.1.9 |
| CVE-2020-2050 | 8.2 | Nov 12 | An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate… Affected: 8.1.0 before 8.1.17; 9.0.0 before 9.0.11; 9.1.0 before 9.1.5; 10.0.0 before 10.0.1 |
| CVE-2026-0298 | 8.1 | Aug 13 | GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) Affected: 6.0.0 before 6.0.15; 6.2.0 before 6.2.8; 6.3.0 before 6.3.3; 6.0.15; 6.2.8; 6.2.8; +21 more |
| CVE-2026-0297 | 8.1 | Aug 13 | GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake Affected: 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; +34 more |
| CVE-2026-0250 | 8.1 | May 13 | GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway Affected: 6.0.0 before 6.0.12; 6.0.0 before 6.0.13; 6.0.0 before 6.0.13; 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.1.0 before 6.1.14; +32 more |
| CVE-2026-0265 | 8.1 | May 13 | PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled Affected: 12.1.0 before 12.1.7, 12.1.4-h5; 11.2.0 before 11.2.12, 11.2.10-h6, 11.2.7-h13, 11.2.4-h17; 11.1.0 before 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33; 10.2.0 before 10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34 |
| CVE-2022-0030 | 8.1 | Oct 12 | PAN-OS: Authentication Bypass in Web Interface Affected: 8.1 before 8.1.24 |
| CVE-2021-3060 | 8.1 | Nov 10 | An OS command injection vulnerability in the Simple Certificate Enrollment Protocol (SCEP) feature of PAN-OS software allows an unauthenticated network-based attacker with… Affected: 8.1.0 through 8.1.20; 9.0.0 through 9.0.14; 9.1.0 through 9.1.11; 10.0.0 before 10.0.8; 10.1.0 before 10.1.3 |
| CVE-2021-3059 | 8.1 | Nov 10 | An OS command injection vulnerability in the Palo Alto Networks PAN-OS management interface exists when performing dynamic updates Affected: 8.1.0 through 8.1.20; 9.0.0 through 9.0.14; 9.1.0 through 9.1.11; 10.0.0 before 10.0.8; 10.1.0 before 10.1.3 |
| CVE-2021-3057 | 8.1 | Oct 13 | A stack-based buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect app that enables a man-in-the-middle attacker to disrupt system processes and… Affected: 5.0 through 5.0.8; 5.0 through 5.0.9; 5.0 through 5.0.10; 5.1 through 5.1.1; 5.1 through 5.1.1; 5.1 before 5.1.9; +7 more |
| CVE-2020-2034 | 8.1 | Jul 8 | An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based attacker to execute arbitrary OS commands with root privileges Affected: 7.1.0 through 7.1.26; 8.0.0 through 8.0.20; 8.1.0 before 8.1.15; 9.0.0 before 9.0.9; 9.1.0 before 9.1.3 |
| CVE-2020-2002 | 8.1 | May 13 | An authentication bypass by spoofing vulnerability exists in the authentication daemon and User-ID components of Palo Alto Networks PAN-OS by failing to verify the integrity of… Affected: 7.1.0 before 7.1.26; 8.0.0 through 8.0.20; 8.1.0 before 8.1.13; 9.0.0 before 9.0.6 |
| CVE-2025-0118 | 8.0 | Mar 12 | A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user Affected: 6.0.0 before 6.0.11; 6.1.0 before 6.1.6; 6.2.0 before 6.2.5; 6.3.0 before 6.3.3 |
| CVE-2026-0299 | 7.8 | Aug 13 | GlobalProtect App: Local Privilege Escalation Vulnerabilities Affected: 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.2.0 before 6.2.8; 6.2.0 before 6.2.8; 6.3.0 before 6.3.3; +34 more |
| CVE-2026-0251 | 7.8 | May 13 | GlobalProtect App: Local Privilege Escalation Vulnerabilities Affected: 6.0.0 before 6.0.11; 6.0.0 before 6.0.13; 6.0.0 before 6.0.13; 6.2.0 before 6.2.8; 6.2.0 before 6.2.8; 6.3.0 before 6.3.3; +27 more |
| CVE-2024-9473 | 7.8 | Oct 9 | A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a locally authenticated non-administrative Windows user to escalate their… Affected: 5.1 before 6.2.5; 6.3.0; 6.3.1 |
| CVE-2024-5915 | 7.8 | Aug 14 | A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges Affected: 5.1.0 through 5.1.9; 6.0.0 through 6.0.6; 6.1.0 before 6.1.5; 6.2.0 before 6.2.4; 6.3.0 |
| CVE-2023-0009 | 7.8 | Jun 14 | A local privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with elevated privileges Affected: before 5.2.13; 6.0.0 before 6.0.5; 6.1.0 |
| CVE-2022-0017 | 7.8 | Feb 10 | An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to… Affected: 5.1 before 5.1.10; 5.2 before 5.2.5 |
| CVE-2022-0016 | 7.8 | Feb 10 | An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo Alto Networks GlobalProtect app that enables a local… Affected: 5.2 before 5.2.9 |
| CVE-2020-1989 | 7.8 | Apr 8 | An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local… Affected: 5.0 before 5.0.8; 5.1 before 5.1.1 |
| CVE-2020-1981 | 7.8 | Mar 11 | A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation Affected: 8.1.0 before 8.1.13 |
| CVE-2020-1980 | 7.8 | Mar 11 | A shell command injection vulnerability in the PAN-OS CLI allows a local authenticated user to escape the restricted shell and escalate privileges Affected: 8.1.0 before 8.1.13 |
| CVE-2020-1979 | 7.8 | Mar 11 | A format string vulnerability in the PAN-OS log daemon (logd) on Panorama allows a network based attacker with knowledge of registered firewall devices and access to Panorama… Affected: before 8.1.13 |
| CVE-2019-17437 | 7.8 | Dec 5 | An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser custom role user to elevate privileges and become superuser Affected: 7.1.0 before 7.1.25; 8.0.0 before 8.0.20; 8.1.0 before 8.1.11; 9.0.0 before 9.0.5 |
| CVE-2015-6531 | 7.8 | Jun 1 | Palo Alto Networks Panorama VM Appliance with PAN-OS before 6.0.1 might allow remote attackers to execute arbitrary Python code via a crafted firmware image file Affected: through 6.0 |
| CVE-2017-7218 | 7.8 | Apr 14 | The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters Affected: through 7.1.8 |
| CVE-2016-9151 | 7.8 | Nov 19 | Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows local users to gain… Affected: 5.0.0 before 5.0.20; 5.1 before 5.1.13; 6.0.0 before 6.0.15; 6.1.0 before 6.1.15; 7.0.0 before 7.0.11; 7.1.0 before 7.1.6 |
| CVE-2016-1712 | 7.8 | Aug 2 | Palo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before 7.0.8 might allow local users to gain privileges by… Affected: 5.0.0 before 5.0.19; 5.1 before 5.1.12; 6.0.0 before 6.0.14; 6.1.0 before 6.1.12; 7.0.0 before 7.0.8 |
| CVE-2024-3661 | 7.6 | May 6 | DHCP can add routes to a client’s routing table via the classless static route option (121) Affected: All versions, or not specified |
| CVE-2026-0301 | 7.5 | Aug 13 | PAN-OS: Information Disclosure Vulnerability in URL Filtering Affected: 11.1.0 before 11.1.16-h1; 10.2.0 before 10.2.8 |
| CVE-2026-0287 | 7.5 | Jul 9 | PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing Affected: 12.1.0 before 12.1.4-h8; 11.2.0 before 11.2.4-h20; 11.1.0 before 11.1.4-h35; 10.2.0 before 10.2.7-h36 |
| CVE-2026-0288 | 7.5 | Jul 8 | PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent Affected: 12.1.0 before 12.1.8; 11.2.0 before 11.2.13; 11.1.0 before 11.1.16; 10.2.0 before 10.2.7-h36 |
| CVE-2026-0262 | 7.5 | May 13 | PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing Affected: 12.1.0 before 12.1.7, 12.1.4-h5; 11.2.0 before 11.2.12, 11.2.10-h6, 11.2.7-h13, 11.2.4-h17; 11.1.0 before 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33; 10.2.0 before 10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34 |
| CVE-2026-0227 | 7.5 | Jan 15 | A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall Affected: 10.1.0 before 10.1.14; 10.2.0 before 10.2.7; 10.2.8 before 10.2.10; 10.2.11 before 10.2.13; 10.2.14 before 10.2.16; 11.1.0 before 11.1.4; +34 more |
| CVE-2025-0130 | 7.5 | May 14 | A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated attacker to send a burst of maliciously crafted… Affected: 11.1.0 before 11.1.6; 11.2.0 before 11.2.5; 11.1.7; 11.1.7 |
| CVE-2025-0114 | 7.5 | Mar 12 | A Denial of Service (DoS) vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software enables an unauthenticated attacker to render the service unavailable by… Affected: 10.1.0 before 10.1.14; 10.2.0 before 10.2.5; 11.0.0 before 11.0.2; 10.1.14; 10.1.14; 10.1.14; +7 more |
| CVE-2024-2551 | 7.5 | Nov 14 | A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a… Affected: 10.1.0 before 10.1.14; 10.2.0 before 10.2.4; 11.0.0 before 11.0.5; 10.2.4; 10.2.4; 10.2.4; +1 more |
| CVE-2024-2550 | 7.5 | Nov 14 | A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop the GlobalProtect service… Affected: 10.2.0 before 10.2.7; 11.0.0 before 11.0.6; 11.1.0 before 11.1.4; 10.2.7; 10.2.7; 10.2.7; +28 more |
| CVE-2024-9468 | 7.5 | Oct 9 | A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due to a crafted packet through the data plane,… Affected: 10.2.0 before 10.2.4; 10.2.5 before 10.2.7; 11.0.0 before 11.0.4; 11.0.5 before 11.0.6; 11.1.0 before 11.1.3; 10.2.4; +34 more |
| CVE-2024-5908 | 7.5 | Jun 12 | A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in application logs Affected: 5.1 before 5.1.12; 6.0 before 6.0.8; 6.1 before 6.1.3; 6.2 before 6.2.3 |
| CVE-2024-3385 | 7.5 | Apr 10 | A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls Affected: 9.0.0 through 9.0.16; 9.1.0 before 9.1.17; 10.1.0 before 10.1.12; 10.2.0 before 10.2.8; 11.0.0 before 11.0.3; 9.0.17; +1 more |
| CVE-2024-3384 | 7.5 | Apr 10 | A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from… Affected: 8.1.0 before 8.1.24; 9.0.0 before 9.0.17; 9.1.0 before 9.1.15; 10.0.0 before 10.0.12; 9.1.15 |
| CVE-2024-3382 | 7.5 | Apr 10 | A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets through the firewall that eventually prevents the firewall… Affected: 10.2.0 before 10.2.7; 11.0.0 before 11.0.4; 11.1.0 before 11.1.2; 10.2.7; 10.2.7 |
| CVE-2021-3063 | 7.5 | Nov 10 | An improper handling of exceptional conditions vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based… Affected: 8.1.0 before 8.1.21; 9.0.0 through 9.0.14; 9.1.0 through 9.1.11; 10.0.0 through 10.0.8; 10.1.0 before 10.1.3 |
| CVE-2021-3053 | 7.5 | Sep 8 | An improper handling of exceptional conditions vulnerability exists in the Palo Alto Networks PAN-OS dataplane that enables an unauthenticated network-based attacker to send… Affected: 8.1.0 before 8.1.20; 9.0.0 before 9.0.14; 9.1.0 before 9.1.9; 10.0.0 before 10.0.5 |
| CVE-2020-2022 | 7.5 | Nov 12 | An information exposure vulnerability exists in Palo Alto Networks Panorama software that discloses the token for the Panorama web interface administrator's session to a managed… Affected: 8.1.0 before 8.1.17; 9.0.0 before 9.0.11; 9.1.0 before 9.1.5 |