PA
Product
Prisma Access
On CISA KEVExploited in the wildRansomware-linked
9
CVEs
2
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 2Low 0
Watch
Add Prisma Access to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-0257 RansomwareIn wildKEV | 9.1 | May 13 | PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities Affected: All versions, or not specified |
| CVE-2024-3393 In wildKEV | 7.5 | Dec 27 | PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet Affected: All versions, or not specified |
| CVE-2021-3060 | 8.1 | Nov 10 | An OS command injection vulnerability in the Simple Certificate Enrollment Protocol (SCEP) feature of PAN-OS software allows an unauthenticated network-based attacker with… Affected: 2.1; 2.1 |
| CVE-2026-0301 | 7.5 | Aug 13 | PAN-OS: Information Disclosure Vulnerability in URL Filtering Affected: before 6.0.0; before 6.0.0 |
| CVE-2026-0227 | 7.5 | Jan 15 | A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall Affected: All versions, or not specified |
| CVE-2021-3061 | 7.2 | Nov 10 | An OS command injection vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables an authenticated administrator with access to the CLI to execute… Affected: 2.1; 2.1 |
| CVE-2024-8687 | 7.1 | Sep 11 | An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall… Affected: All versions, or not specified |
| CVE-2022-0011 | 6.5 | Feb 10 | PAN-OS software provides options to exclude specific websites from URL category enforcement and those websites are blocked or allowed (depending on your rules) regardless of their… Affected: 2.1; 2.1; 2.2 |
| CVE-2024-3388 | 5.0 | Apr 10 | A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to… Affected: All versions, or not specified |
Showing 9