PA
Network Security
PAN-OS
On CISA KEVExploited in the wildRansomware-linked
288
CVEs
17
On KEV
10.0
Max CVSS
9
New 30D
Severity mix
Critical 28High 116Medium 106Low 17
Watch
Add PAN-OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-2041 | 7.5 | Sep 9 | An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 allows a remote unauthenticated user to send a specifically crafted request to the device that… Affected: 8.0.0 through 8.0.20; 8.1.0 before 8.1.16 |
| CVE-2020-2012 | 7.5 | May 13 | Improper restriction of XML external entity reference ('XXE') vulnerability in Palo Alto Networks Panorama management service allows remote unauthenticated attackers with network… Affected: 7.1.0 through 7.1.26; 8.0.0 through 8.0.20; 8.1.0 before 8.1.13; 9.0.0 before 9.0.7 |
| CVE-2020-2011 | 7.5 | May 13 | An improper input validation vulnerability in the configuration daemon of Palo Alto Networks PAN-OS Panorama allows for a remote unauthenticated user to send a specifically… Affected: 7.1.0 through 7.1.26; 8.0.0 through 8.0.20; 8.1.0 before 8.1.14; 9.0.0 before 9.1.0 |
| CVE-2019-1572 | 7.5 | Mar 26 | PAN-OS 9.0.0 may allow an unauthenticated remote user to access php files Affected: 9.0.0 |
| CVE-2017-15942 | 7.5 | Dec 11 | Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.13, and 8.0.x before 8.0.6 allows remote attackers to cause a denial of service via vectors related… Affected: before 6.1.19; 7.0.0 before 7.0.19; 7.1.0 before 7.1.13; 8.0.0 before 8.0.6 |
| CVE-2016-8610 | 7.5 | Nov 13 | A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection… Affected: through 6.1.17; 7.0.0 through 7.0.15; 7.1.0 through 7.1.10 |
| CVE-2016-3656 | 7.5 | Apr 12 | The GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote attackers to cause a denial… Affected: 5.0.0 before 5.0.18; 5.1 before 5.1.11; 6.0.0 before 6.0.13; 6.1.0 before 6.1.10; 7.0.0 through 7.0.5 |
| CVE-2026-0296 | 7.4 | Aug 13 | GlobalProtect App: Improper Certificate Validation Bypass Vulnerability Affected: 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.2.0 before 6.2.8; 6.2.0 before 6.2.8; 6.2.0 through 6.2.9; +34 more |
| CVE-2026-0310 | 7.2 | Sep 10 | PAN-OS: Buffer Overflow Vulnerability via XML Processing Affected: 12.2.0 before 12.2.3; 12.1.0 before 12.1.4-h10; 11.2.0 before 11.2.4-h21; 11.1.0 before 11.1.4-h36; 10.2.0 before 10.2.7-h37 |
| CVE-2026-0280 | 7.2 | Jul 9 | PAN-OS: IPv6 Firewall Policy Bypass Affected: 12.1.0 before 12.1.8; 11.2.0 before 11.2.13; 11.1.0 before 11.1.16; 10.2.0 before 10.2.18-h8 |
| CVE-2026-0283 | 7.2 | Jul 9 | PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) Affected: 12.1.0 before 12.1.8; 11.2.0 before 11.2.13; 11.1.0 before 11.1.16; 10.2.0 before 10.2.18-h8 |
| CVE-2026-0286 | 7.2 | Jul 9 | PAN-OS: Authenticated Command Injection in CLI Affected: 12.1.0 before 12.1.8; 11.2.0 before 11.2.13; 11.1.0 before 11.1.16; 10.2.0 before 10.2.18-h8 |
| CVE-2026-0273 | 7.2 | Jun 10 | PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI Affected: 12.1.0 before 12.1.4-h7; 11.2.0 before 11.2.4-h18; 11.1.0 before 11.1.4-h34; 10.2.0 before 10.2.7-h35 |
| CVE-2026-0272 | 7.2 | Jun 10 | PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI) Affected: 12.1.0 before 12.1.4-h7; 11.2.0 before 11.2.4-h18; 11.1.0 before 11.1.4-h34; 10.2.0 before 10.2.7-h35 |
| CVE-2026-0261 | 7.2 | May 13 | PAN-OS: Authenticated Admin Command Injection Vulnerability Affected: 12.1.0 before 12.1.7, 12.1.4-h5; 11.2.0 before 11.2.12, 11.2.10-h6, 11.2.7-h13, 11.2.4-h17; 11.1.0 before 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33; 10.2.0 before 10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34 |
| CVE-2025-4615 | 7.2 | Oct 9 | An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system… Affected: 10.2.0 before 10.2.17; 11.1.0 before 11.1.11; 11.2.0 before 11.2.8 |
| CVE-2025-4231 | 7.2 | Jun 13 | A command injection vulnerability in Palo Alto Networks PAN-OS® enables an authenticated administrative user to perform actions as the root user Affected: 10.2.0 before 10.2.8; 11.0.0 before 11.0.3 |
| CVE-2024-8686 | 7.2 | Sep 11 | A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as root on… Affected: 11.2.0 through 11.2.2 |
| CVE-2022-0024 | 7.2 | May 11 | A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated network-based PAN-OS administrator to upload a specifically created configuration that… Affected: 8.1.0 before 8.1.23; 9.0.0 before 9.0.16; 9.1.0 before 9.1.13; 10.0.0 before 10.0.10; 10.1.0 before 10.1.5 |
| CVE-2021-3061 | 7.2 | Nov 10 | An OS command injection vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables an authenticated administrator with access to the CLI to execute… Affected: 8.1.0 through 8.1.20; 9.0.0 through 9.0.14; 9.1.0 through 9.1.11; 10.0.0 before 10.0.8; 10.1.0 before 10.1.3 |
| CVE-2021-3058 | 7.2 | Nov 10 | An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator with permissions to use XML API the ability to execute… Affected: 8.1.0 through 8.1.20; 9.0.0 through 9.0.14; 9.1.0 through 9.1.11; 10.0.0 before 10.0.8; 10.1.0 before 10.1.3 |
| CVE-2020-2000 | 7.2 | Nov 12 | An OS command injection and memory corruption vulnerability in the PAN-OS management web interface that allows authenticated administrators to disrupt system processes and… Affected: 8.1.0 before 8.1.16; 9.0.0 before 9.0.10; 9.1.0 before 9.1.4; 10.0.0 before 10.0.1 |
| CVE-2020-2042 | 7.2 | Sep 9 | A buffer overflow vulnerability in the PAN-OS management web interface allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with… Affected: 10.0.0 before 10.0.1 |
| CVE-2020-2038 | 7.2 | Sep 9 | An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges Affected: 9.0.0 before 9.0.10; 9.1.0 before 9.1.4; 10.0.0 before 10.0.1 |
| CVE-2020-2037 | 7.2 | Sep 9 | An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges Affected: 8.1.0 before 8.1.16; 9.0.0 before 9.0.10; 9.1.0 before 9.1.3 |
| CVE-2020-2030 | 7.2 | Jul 8 | An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges Affected: 7.1.0 through 7.1.26; 8.0.0 through 8.0.20; 8.1.0 before 8.1.15 |
| CVE-2020-2029 | 7.2 | Jun 10 | An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to execute arbitrary OS commands with root privileges by sending a… Affected: 7.1.0 before 7.1.26; 8.0.0 through 8.0.20; 8.1.0 before 8.1.13 |
| CVE-2020-2028 | 7.2 | Jun 10 | An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new… Affected: 7.1.0 through 7.1.26; 8.0.0 through 8.0.20; 8.1.0 before 8.1.13; 9.0.0 before 9.0.7 |
| CVE-2020-2027 | 7.2 | Jun 10 | A buffer overflow vulnerability in the authd component of the PAN-OS management server allows authenticated administrators to disrupt system processes and potentially execute… Affected: 7.1.0 through 7.1.26; 8.0.0 through 8.0.20; 8.1.0 before 8.1.13; 9.0.0 before 9.0.7 |
| CVE-2020-2010 | 7.2 | May 13 | An OS command injection vulnerability in PAN-OS management interface allows an authenticated administrator to execute arbitrary OS commands with root privileges Affected: 7.1.0 through 7.1.26; 8.0.0 through 8.0.20; 8.1.0 through 8.1.13; 9.0.0 through 9.0.6 |
| CVE-2020-2009 | 7.2 | May 13 | An external control of filename vulnerability in the SD WAN component of Palo Alto Networks PAN-OS Panorama allows an authenticated administrator to send a request that results in… Affected: 7.1.0 through 7.1.26; 8.0.0 through 8.0.20; 8.1.0 through 8.1.13; 9.0.0 through 9.0.6 |
| CVE-2020-2008 | 7.2 | May 13 | An OS command injection and external control of filename vulnerability in Palo Alto Networks PAN-OS allows authenticated administrators to execute code with root privileges or… Affected: 7.1.0 through 7.1.26; 8.0.0 through 8.0.20; 8.1.0 through 8.1.13 |
| CVE-2020-2007 | 7.2 | May 13 | An OS command injection vulnerability in the management server component of PAN-OS allows an authenticated user to potentially execute arbitrary commands with root privileges Affected: 7.1.0 through 7.1.26; 8.0.0 through 8.0.20; 8.1.0 through 8.1.13; 9.0.0 through 9.0.6 |
| CVE-2020-1990 | 7.2 | Apr 8 | A stack-based buffer overflow vulnerability in the management server component of PAN-OS allows an authenticated user to upload a corrupted PAN-OS configuration and potentially… Affected: 8.1.0 before 8.1.13; 9.0.0 before 9.0.7 |
| CVE-2019-1582 | 7.2 | Aug 23 | Memory corruption in PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow an administrative user to cause arbitrary memory corruption by rekeying the current client… Affected: 8.1.0 through 8.1.9; 9.0.0 through 9.0.3 |
| CVE-2016-3654 | 7.2 | Apr 12 | The device management command line interface (CLI) in Palo Alto Networks PAN-OS before 5.0.18, 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before… Affected: 5.0.0 before 5.0.18; 5.1 before 5.1.11; 6.0.0 before 6.0.13; 6.1.0 before 6.1.10; 7.0.0 through 7.0.5 |
| CVE-2026-0281 | 7.1 | Jul 9 | PAN-OS: Information Disclosure Vulnerability in Management Web Interface Affected: 12.1.0 before 12.1.8; 11.2.0 before 11.2.13; 11.1.0 before 11.1.16; 10.2.0 before 10.2.18-h8 |
| CVE-2024-8691 | 7.1 | Sep 11 | A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated GlobalProtect user to impersonate another GlobalProtect user Affected: 9.1.0 before 9.1.17; 10.1.0 before 10.1.11 |
| CVE-2024-8687 | 7.1 | Sep 11 | An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall… Affected: 8.1.0 before 8.1.25; 9.0.0 before 9.0.17; 9.1.0 before 9.1.16; 10.0.0 before 10.0.12; 10.1.0 before 10.1.9; 10.2.0 before 10.2.4; +1 more |
| CVE-2019-17436 | 7.1 | Oct 16 | A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlier and version 4.1.12 and earlier, that can allow non-root… Affected: through 5.0.4; through 5.0.4; through 4.1.12; through 4.1.12 |
| CVE-2026-0295 | 7.0 | Aug 13 | GlobalProtect App: Local Privilege Escalation via Race Condition on macOS Affected: before 6.0.15; 6.2.0 before 6.2.8; 6.3.0 before 6.3.3; 6.2.8; 6.2.8; 6.2.8; +21 more |
| CVE-2025-0120 | 7.0 | Apr 11 | A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows… Affected: 6.0.0 before 6.0.12; 6.1.0 before 6.2.7-1077; 6.3.0 before 6.3.3 |
| CVE-2024-2432 | 7.0 | Mar 13 | A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges Affected: 5.1.0 before 5.1.12; 6.0.0 before 6.0.8; 6.1.0 before 6.1.2; 6.2.0 |
| CVE-2020-2032 | 7.0 | Jun 10 | A race condition vulnerability Palo Alto Networks GlobalProtect app on Windows allows a local limited Windows user to execute programs with SYSTEM privileges Affected: 5.0.0 before 5.0.10; 5.1.0 before 5.1.4 |
| CVE-2020-2016 | 7.0 | May 13 | A race condition due to insecure creation of a file in a temporary directory vulnerability in PAN-OS allows for root privilege escalation from a limited linux user account Affected: 7.1.0 before 7.1.26; 8.0.0 through 8.0.20; 8.1.0 before 8.1.13; 9.0.0 before 9.0.6 |
| CVE-2024-5913 | 6.8 | Jul 10 | An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to tamper with the physical file system to elevate privileges Affected: 10.1.0 before 10.1.14; 10.2.0 before 10.2.10; 11.0.0 before 11.0.5; 11.1.0 before 11.1.4; 11.2.0 before 11.2.1; 10.1.14 |
| CVE-2020-1988 | 6.7 | Apr 8 | An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file creation privileges on the root of the OS disk… Affected: 4.1.0 before 4.1.13; 5.0.0 before 5.0.5 |
| CVE-2017-15870 | 6.7 | Dec 11 | Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to gain SYSTEM privileges via vectors involving "image path… Affected: through 4.0.2 |
| CVE-2026-0321 | 6.6 | Oct 14 | PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services Affected: 12.2.0 before 12.2.4; 12.1.0 before 12.1.10-h2; 11.2.0 before 11.2.16; 11.1.0 before 11.1.16-h3; 10.2.0 before 10.2.18-h12 |
| CVE-2021-3054 | 6.6 | Sep 8 | A time-of-check to time-of-use (TOCTOU) race condition vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator with permission to… Affected: 8.1.0 before 8.1.20; 9.0.0 before 9.0.14; 9.1.0 before 9.1.11; 10.0.0 before 10.0.7; 10.1.0 before 10.1.2 |