PA
Vendor
Palo Alto Networks
379
CVEs
21
On KEV
19
New 30D
Products
PA10.0
PAN-OS
Network Security
288 CVEs17 on KEV9 new
PA9.1
Prisma Access
Palo Alto Networks
11 CVEs1 on KEV2 new
GA8.1
GlobalProtect App
Palo Alto Networks
12 CVEs0 on KEV2 new
CB4.3
Checkov by Prisma Cloud
Palo Alto Networks
4 CVEs0 on KEV2 new
CN7.5
Cloud NGFW
Palo Alto Networks
5 CVEs0 on KEV1 new
CX6.1
Cortex XSIAM OS Query
Palo Alto Networks
1 CVEs0 on KEV1 new
CX6.1
Cortex XSOAR OS Query
Palo Alto Networks
1 CVEs0 on KEV1 new
IS8.6
Idira Secrets Manager (Self-Hosted)
Palo Alto Networks
1 CVEs0 on KEV1 new
EX9.8
Expedition
Network Security
16 CVEs3 on KEV0 new
PA7.8
Prisma Access Agent
Palo Alto Networks
14 CVEs0 on KEV0 new
PB7.8
Prisma Browser
Palo Alto Networks
6 CVEs0 on KEV0 new
TP8.7
Trust Protection Foundation
Palo Alto Networks
3 CVEs0 on KEV0 new
CX7.8
Cortex XDR Broker VM
Palo Alto Networks
2 CVEs0 on KEV0 new
PS8.1
Prisma SD-WAN ION
Palo Alto Networks
2 CVEs0 on KEV0 new
AD8.8
Autonomous Digital Experience Manager
Palo Alto Networks
1 CVEs0 on KEV0 new
BV3.2
Broker VM
Palo Alto Networks
1 CVEs0 on KEV0 new
CC6.5
Chronosphere Chronocollector
Palo Alto Networks
1 CVEs0 on KEV0 new
CX4.4
Cortex XDR Agent
Palo Alto Networks
1 CVEs0 on KEV0 new
CX9.1
Cortex XSIAM CommvaultSecurityIQ Marketplace
Palo Alto Networks
1 CVEs0 on KEV0 new
CX9.1
Cortex XSIAM Microsoft Teams Marketplace
Palo Alto Networks
1 CVEs0 on KEV0 new
CX7.5
Cortex XSOAR
Palo Alto Networks
1 CVEs0 on KEV0 new
CX9.1
Cortex XSOAR CommvaultSecurityIQ Marketplace
Palo Alto Networks
1 CVEs0 on KEV0 new
CX9.1
Cortex XSOAR Microsoft Teams Marketplace
Palo Alto Networks
1 CVEs0 on KEV0 new
FI–
Firewall
Palo Alto Networks
1 CVEs0 on KEV0 new
GU8.1
GlobalProtect UWP App
Palo Alto Networks
1 CVEs0 on KEV0 new
TR–
Traps
Palo Alto Networks
1 CVEs0 on KEV0 new
WW8.8
WildFire WF-500 and WF-500-B
Palo Alto Networks
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-109619 In wildKEVNew | PA PAN-OS Palo Alto Networks | 8.1 | Oct 21 | RCE via stale global state |
| CVE-2026-109618 In wildKEVNew | PA PAN-OS Palo Alto Networks | 9.8 | Oct 21 | RCE via OOM corruption |
| CVE-2026-45165 | IS Idira Secrets Manager (Self-Hosted) Palo Alto Networks | 8.6 | Oct 15 | Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API |
| CVE-2026-0311 | CB Checkov by Prisma Cloud Palo Alto Networks | 1.1 | Oct 14 | Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability |
| CVE-2026-0312 | CB Checkov by Prisma Cloud Palo Alto Networks | 4.3 | Oct 14 | Checkov by Prisma Cloud: Path Traversal Vulnerabilities |
| CVE-2026-0313 | CX Cortex XSOAR OS Query Palo Alto Networks | 6.1 | Oct 14 | Cortex XSOAR: OS Command Injection Vulnerability |
| CVE-2026-0314 | GA GlobalProtect App Palo Alto Networks | 4.3 | Oct 14 | GlobalProtect App: Local Denial of Service (DoS) on Windows |
| CVE-2026-0315 | GA GlobalProtect App Palo Alto Networks | 5.9 | Oct 14 | GlobalProtect App: Local Privilege Escalation Vulnerability on macOS |
| CVE-2026-0316 | PA PAN-OS Palo Alto Networks | 1.1 | Oct 14 | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability |
| CVE-2026-0317 | PA PAN-OS Palo Alto Networks | 1.2 | Oct 14 | PAN-OS: Denial of Service Vulnerability |
| CVE-2026-0318 | PA PAN-OS Palo Alto Networks | 4.6 | Oct 14 | PAN-OS: Denial of Service (DoS) on Panorama |
| CVE-2026-0319 | PA PAN-OS Palo Alto Networks | 4.9 | Oct 14 | PAN-OS: Improper Input Handling Vulnerability |
| CVE-2026-0320 | PA PAN-OS Palo Alto Networks | 6.1 | Oct 14 | PAN-OS: Authenticated Admin Command Injection Vulnerability |
| CVE-2026-0321 | PA PAN-OS Palo Alto Networks | 6.6 | Oct 14 | PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services |
| CVE-2026-0322 In wildKEV | PA PAN-OS Palo Alto Networks | 7.2 | Oct 14 | PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface |
| CVE-2026-0302 | CB Checkov by Prisma Cloud Palo Alto Networks | 1.1 | Sep 10 | Checkov by Prisma Cloud: OS Command Injection Vulnerability |
| CVE-2026-0303 | CB Checkov by Prisma Cloud Palo Alto Networks | 2.4 | Sep 10 | Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File |
| CVE-2026-0304 | CX Cortex XDR Broker VM Palo Alto Networks | 4.8 | Sep 10 | Cortex XDR Broker VM: Privilege Escalation Vulnerability |
| CVE-2026-0305 | PA Prisma Access Agent Palo Alto Networks | 4.3 | Sep 10 | Prisma Access Agent: Information Disclosure Vulnerability on Linux |
| CVE-2026-0306 | PA Prisma Access Agent Palo Alto Networks | 5.8 | Sep 10 | Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows |
| CVE-2026-0307 | GA GlobalProtect App Palo Alto Networks | 5.9 | Sep 10 | GlobalProtect App: Local Privilege Escalation Vulnerabilities |
| CVE-2026-0308 | PA PAN-OS Palo Alto Networks | 1.1 | Sep 10 | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface |
| CVE-2026-0309 | PA PAN-OS Palo Alto Networks | 4.0 | Sep 10 | PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration |
| CVE-2026-0310 | PA PAN-OS Palo Alto Networks | 7.2 | Sep 10 | PAN-OS: Buffer Overflow Vulnerability via XML Processing |
| CVE-2026-0301 | PA PAN-OS Palo Alto Networks | 7.5 | Aug 13 | PAN-OS: Information Disclosure Vulnerability in URL Filtering |
| CVE-2026-0299 | PA PAN-OS Palo Alto Networks | 7.8 | Aug 13 | GlobalProtect App: Local Privilege Escalation Vulnerabilities |
| CVE-2026-0298 | PA PAN-OS Palo Alto Networks | 8.1 | Aug 13 | GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) |
| CVE-2026-0297 | PA PAN-OS Palo Alto Networks | 8.1 | Aug 13 | GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake |
| CVE-2026-0296 | PA PAN-OS Palo Alto Networks | 7.4 | Aug 13 | GlobalProtect App: Improper Certificate Validation Bypass Vulnerability |
| CVE-2026-0295 | PA PAN-OS Palo Alto Networks | 7.0 | Aug 13 | GlobalProtect App: Local Privilege Escalation via Race Condition on macOS |
| CVE-2026-0294 | PA Prisma Access Agent Palo Alto Networks | 7.8 | Aug 13 | Prisma Access Agent: Local Privilege Escalation |
| CVE-2026-0293 | PA Prisma Access Agent Palo Alto Networks | 6.0 | Aug 13 | Prisma Access Agent: Anti-Tamper Protection Bypass on Windows |
| CVE-2026-0292 | PA Prisma Access Agent Palo Alto Networks | 6.0 | Aug 13 | Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows |
| CVE-2026-0291 | PA Prisma Access Agent Palo Alto Networks | 4.4 | Aug 13 | Prisma Access Agent: Authenticated Limited File Deletion on Linux |
| CVE-2026-0290 | PB Prisma Browser Palo Alto Networks | 5.5 | Aug 13 | Prisma Browser: Sensitive Information Disclosure Vulnerability |
| CVE-2026-0289 | PB Prisma Browser Palo Alto Networks | 6.5 | Aug 13 | Prisma Browser: Inappropriate Implementation in Account Protection |
| CVE-2026-0275 | PB Prisma Browser Palo Alto Networks | 6.7 | Jul 9 | Prisma Browser: Local Privilege Escalation on macOS |
| CVE-2026-0276 | CX Cortex XDR Broker VM Palo Alto Networks | 7.8 | Jul 9 | Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability |
| CVE-2026-0277 | PA Prisma Access Agent Palo Alto Networks | 5.9 | Jul 9 | Prisma Access Agent: Improper Certificate Validation on iOS |
| CVE-2026-0278 | PA Prisma Access Agent Palo Alto Networks | 7.8 | Jul 9 | Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows |
| CVE-2026-0279 | PA PAN-OS Palo Alto Networks | 6.1 | Jul 9 | PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities |
| CVE-2026-0280 | PA PAN-OS Palo Alto Networks | 7.2 | Jul 9 | PAN-OS: IPv6 Firewall Policy Bypass |
| CVE-2026-0281 | PA PAN-OS Palo Alto Networks | 7.1 | Jul 9 | PAN-OS: Information Disclosure Vulnerability in Management Web Interface |
| CVE-2026-0282 | PA PAN-OS Palo Alto Networks | 6.5 | Jul 9 | PAN-OS: File Deletion Vulnerability in Management Web Interface |
| CVE-2026-0283 | PA PAN-OS Palo Alto Networks | 7.2 | Jul 9 | PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) |
| CVE-2026-0284 | PA PAN-OS Palo Alto Networks | 9.9 | Jul 9 | PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN) |
| CVE-2026-0285 | PA PAN-OS Palo Alto Networks | 4.9 | Jul 9 | PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface |
| CVE-2026-0286 | PA PAN-OS Palo Alto Networks | 7.2 | Jul 9 | PAN-OS: Authenticated Command Injection in CLI |
| CVE-2026-0287 | PA PAN-OS Palo Alto Networks | 7.5 | Jul 9 | PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing |
| CVE-2026-0288 | PA PAN-OS Palo Alto Networks | 7.5 | Jul 8 | PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent |
| CVE-2026-0274 | CX Cortex XSOAR CommvaultSecurityIQ Marketplace Palo Alto Networks | 9.1 | Jun 10 | Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration |
| CVE-2026-0273 | PA PAN-OS Palo Alto Networks | 7.2 | Jun 10 | PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI |
| CVE-2026-0272 | PA PAN-OS Palo Alto Networks | 7.2 | Jun 10 | PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI) |
| CVE-2026-0271 | PA Prisma Access Agent Palo Alto Networks | 7.8 | Jun 10 | Prisma Access Agent: Local Privilege Escalation by Authorized Users |
| CVE-2026-0270 | CX Cortex XSOAR Palo Alto Networks | 7.5 | Jun 10 | Cortex XSOAR: Path Traversal Vulnerability |
| CVE-2026-0269 | PA PAN-OS Palo Alto Networks | 5.7 | Jun 10 | PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing |
| CVE-2026-0268 | PA Prisma Access Agent Palo Alto Networks | 4.4 | Jun 10 | Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux |
| CVE-2026-0267 | PA PAN-OS Palo Alto Networks | 5.5 | Jun 10 | GlobalProtect App: Information Exposure Vulnerability on macOS |
| CVE-2026-0266 | PA PAN-OS Palo Alto Networks | 4.8 | Jun 10 | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface |
| CVE-2026-0243 | PS Prisma SD-WAN ION Palo Alto Networks | 6.5 | May 13 | Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet |