PA
Network Security
PAN-OS
On CISA KEVExploited in the wildRansomware-linked
306
CVEs
17
On KEV
10.0
Max CVSS
9
New 30D
Severity mix
Critical 28High 121Medium 117Low 19
Watch
Add PAN-OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-2030 | 7.2 | Jul 8 | PAN-OS: OS command injection vulnerability in the management interface Affected: 8.0.*; 7.1.*; 8.1 before 8.1.15 |
| CVE-2020-2029 | 7.2 | Jun 10 | PAN-OS: OS command injection vulnerability in management interface certificate generator Affected: 8.0.*; 7.1 before 7.1.26; 8.1 before 8.1.13 |
| CVE-2020-2028 | 7.2 | Jun 10 | PAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification Affected: 7.1.*; 8.0.*; 8.1 before 8.1.13; 9.0 before 9.0.7 |
| CVE-2020-2027 | 7.2 | Jun 10 | PAN-OS: Buffer overflow in authd authentication response Affected: 7.1.*; 8.0.*; 8.1 before 8.1.13; 9.0 before 9.0.7 |
| CVE-2020-2010 | 7.2 | May 13 | PAN-OS: Authenticated user command injection vulnerability Affected: 8.0.*; 7.1.*; 9.0 before 9.0.7; 8.1 before 8.1.14 |
| CVE-2020-2009 | 7.2 | May 13 | PAN-OS: Panorama SD WAN arbitrary file creation Affected: 7.1.*; 8.0.*; 8.1 before 8.1.14; 9.0 before 9.0.7 |
| CVE-2020-2008 | 7.2 | May 13 | PAN-OS: OS command injection or arbitrary file deletion vulnerability Affected: 8.0.*; 7.1.*; 8.1 before 8.1.14 |
| CVE-2020-2007 | 7.2 | May 13 | PAN-OS: OS command injection in management server Affected: 7.1.*; 8.0.*; 9.0 before 9.0.7; 8.1 before 8.1.14 |
| CVE-2020-1990 | 7.2 | Apr 8 | PAN-OS: Buffer overflow in the management server Affected: 8.1 before 8.1.13; 9.0 before 9.0.7 |
| CVE-2019-1582 | 7.2 | Aug 23 | Memory corruption in PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow an administrative user to cause arbitrary memory corruption by rekeying the current client… Affected: PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier. |
| CVE-2016-3654 | 7.2 | Apr 12 | The device management command line interface (CLI) in Palo Alto Networks PAN-OS before 5.0.18, 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before… Affected: 5.0.0 before 5.0.18; 5.1 before 5.1.11; 6.0.0 before 6.0.13; 6.1.0 before 6.1.10; 7.0.0 through 7.0.5 |
| CVE-2026-0281 | 7.1 | Jul 9 | PAN-OS: Information Disclosure Vulnerability in Management Web Interface Affected: 12.1.0 before 12.1.8; 11.2.0 before 11.2.13; 11.1.0 before 11.1.16; 10.2.0 before 10.2.18-h8 |
| CVE-2025-0127 | 7.1 | Apr 11 | PAN-OS: Authenticated Admin Command Injection Vulnerability in PAN-OS VM-Series Affected: 11.0.0 before 11.0.4; 10.2.0 before 10.2.9; 10.1.0 before 10.1.14-h13 |
| CVE-2024-8691 | 7.1 | Sep 11 | PAN-OS: User Impersonation in GlobalProtect Portal Affected: 9.1.0 before 9.1.17; 10.1.0 before 10.1.11 |
| CVE-2024-8687 | 7.1 | Sep 11 | PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes Affected: 11.0.0 before 11.0.1; 10.2.0 before 10.2.4; 10.1.0 before 10.1.9; 10.0.0 before 10.0.12; 9.1.0 before 9.1.16; 9.0.0 before 9.0.17; +1 more |
| CVE-2019-17436 | 7.1 | Oct 16 | A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlier and version 4.1.12 and earlier, that can allow non-root… Affected: through 5.0.4; through 5.0.4; through 4.1.12; through 4.1.12 |
| CVE-2026-0295 | 7.0 | Aug 13 | GlobalProtect App: Local Privilege Escalation via Race Condition on macOS Affected: before 6.0.15; 6.2.0 before 6.2.8; 6.3.0 before 6.3.3; 6.2.8; 6.2.8; 6.2.8; +21 more |
| CVE-2025-0120 | 7.0 | Apr 11 | GlobalProtect App: Local Privilege Escalation (PE) Vulnerability Affected: 6.0.0 before 6.0.12; 6.1.0 before 6.2.7-1077; 6.3.0 before 6.3.3 |
| CVE-2024-2432 | 7.0 | Mar 13 | GlobalProtect App: Local Privilege Escalation (PE) Vulnerability Affected: 5.1.0 before 5.1.12; 6.0.0 before 6.0.8; 6.1.0 before 6.1.2; 6.2.0 |
| CVE-2020-2032 | 7.0 | Jun 10 | GlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgrade Affected: 5.0.0 before 5.0.10; 5.1.0 before 5.1.4 |
| CVE-2020-2016 | 7.0 | May 13 | PAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalation Affected: 8.0.*; 7.1 before 7.1.26; 8.1 before 8.1.13; 9.0 before 9.0.6 |