PA
Network Security
PAN-OS
On CISA KEVExploited in the wildRansomware-linked
288
CVEs
17
On KEV
10.0
Max CVSS
9
New 30D
Severity mix
Critical 28High 116Medium 106Low 17
Watch
Add PAN-OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1978 | 4.4 | Apr 8 | TechSupport files generated on Palo Alto Networks VM Series firewalls for Microsoft Azure platform configured with high availability (HA) inadvertently collect Azure dashboard… Affected: 9.0.0 |
| CVE-2024-5918 | 4.3 | Nov 14 | An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a specially crafted client certificate to connect to an… Affected: 10.1.0 before 10.1.11; 10.2.0 through 10.2.4; 11.0.0 before 11.0.3; 10.2.4; 10.2.4; 10.2.4; +1 more |
| CVE-2021-3031 | 4.3 | Jan 13 | Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared… Affected: 8.1.0 before 8.1.18; 9.0.0 before 9.0.12; 9.1.0 before 9.1.5 |
| CVE-2018-10140 | 4.3 | Aug 16 | The PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may allow an authenticated user to shut down all management sessions, resulting in all logged in… Affected: 8.1.2 and earlier |
| CVE-2017-7217 | 4.3 | Apr 14 | The Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9 allows remote attackers to write to export files via unspecified parameters Affected: through 7.0.13; 7.1.0; 7.1.1; 7.1.2; 7.1.3; 7.1.4; +5 more |
| CVE-2026-0309 | 4.0 | Sep 10 | PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration Affected: 12.2.0 before 12.2.3; 12.1.0 before 12.1.4-h10; 11.2.0 before 11.2.4-h21; 11.1.0 before 11.1.4-h36; 10.2.0 before 10.2.7-h37 |