PA
Vendor
Paloaltonetworks
108
CVEs
4
On KEV
2
New 30D
Products
PV9.8
Panorama Virtual Appliance
Paloaltonetworks
2 CVEs2 on KEV2 new
PA9.1
Prisma Access
Paloaltonetworks
9 CVEs2 on KEV0 new
CX7.8
Cortex Xdr Agent
Paloaltonetworks
20 CVEs0 on KEV0 new
PA7.8
Prisma Access Agent
Paloaltonetworks
12 CVEs0 on KEV0 new
CX9.8
Cortex Xsoar
Paloaltonetworks
11 CVEs0 on KEV0 new
PB7.8
Prisma Browser
Paloaltonetworks
6 CVEs0 on KEV0 new
PC9.8
Prisma Cloud
Paloaltonetworks
4 CVEs0 on KEV0 new
EM8.8
Expedition Migration Tool
Paloaltonetworks
3 CVEs0 on KEV0 new
IE7.8
Idira Endpoint Privilege Manager
Paloaltonetworks
3 CVEs0 on KEV0 new
SE7.8
Secdo
Paloaltonetworks
3 CVEs0 on KEV0 new
TS7.8
Terminal Services Agent
Paloaltonetworks
3 CVEs0 on KEV0 new
TR7.5
Traps
Paloaltonetworks
3 CVEs0 on KEV0 new
BC7.2
Bridgecrew Checkov
Paloaltonetworks
2 CVEs0 on KEV0 new
CN7.5
Cloud Ngfw
Paloaltonetworks
2 CVEs0 on KEV0 new
PS8.1
Prisma Sd-wan
Paloaltonetworks
2 CVEs0 on KEV0 new
TP8.7
Trust Protection Foundation
Paloaltonetworks
2 CVEs0 on KEV0 new
AD8.8
Autonomous Digital Experience Manager
Paloaltonetworks
1 CVEs0 on KEV0 new
BV3.2
Broker VM
Paloaltonetworks
1 CVEs0 on KEV0 new
CC6.5
Chronosphere Collector
Paloaltonetworks
1 CVEs0 on KEV0 new
CX7.8
Cortex Xdr Broker VM
Paloaltonetworks
1 CVEs0 on KEV0 new
CX9.1
Cortex Xsiam
Paloaltonetworks
1 CVEs0 on KEV0 new
CX9.1
Cortex Xsiam Commvaultsecurityiq Marketplace
Paloaltonetworks
1 CVEs0 on KEV0 new
CX9.8
Cortex Xsoar Commonscripts
Paloaltonetworks
1 CVEs0 on KEV0 new
CX9.1
Cortex Xsoar Commvaultsecurityiq Marketplace
Paloaltonetworks
1 CVEs0 on KEV0 new
DE6.1
Demisto
Paloaltonetworks
1 CVEs0 on KEV0 new
II6.5
Idira Identity Browser Extension
Paloaltonetworks
1 CVEs0 on KEV0 new
IP8.8
Idira Privilege Cloud Connector
Paloaltonetworks
1 CVEs0 on KEV0 new
IP8.6
Idira Privileged Access Manager Vault
Paloaltonetworks
1 CVEs0 on KEV0 new
IP8.8
Idira Privileged Session Manager
Paloaltonetworks
1 CVEs0 on KEV0 new
IP8.8
Idira Privileged Session Manager For Ssh
Paloaltonetworks
1 CVEs0 on KEV0 new
IS8.1
Idira Secrets Manager
Paloaltonetworks
1 CVEs0 on KEV0 new
IS8.1
Idira Secrets Manager Credential Providers
Paloaltonetworks
1 CVEs0 on KEV0 new
IS9.1
Idira Secrets Manager Edge
Paloaltonetworks
1 CVEs0 on KEV0 new
MI6.1
Minemeld
Paloaltonetworks
1 CVEs0 on KEV0 new
NE–
Netconnect
Paloaltonetworks
1 CVEs0 on KEV0 new
TW8.0
Twistlock
Paloaltonetworks
1 CVEs0 on KEV0 new
VM4.4
Vm-series
Paloaltonetworks
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-109619 In wildKEVNew | PV Panorama Virtual Appliance Paloaltonetworks | 8.1 | Oct 21 | RCE via stale global state |
| CVE-2026-109618 In wildKEVNew | PV Panorama Virtual Appliance Paloaltonetworks | 9.8 | Oct 21 | RCE via OOM corruption |
| CVE-2026-0301 | CN Cloud Ngfw Paloaltonetworks | 7.5 | Aug 13 | PAN-OS: Information Disclosure Vulnerability in URL Filtering |
| CVE-2026-0294 | PA Prisma Access Agent Paloaltonetworks | 7.8 | Aug 13 | Prisma Access Agent: Local Privilege Escalation |
| CVE-2026-0293 | PA Prisma Access Agent Paloaltonetworks | 6.0 | Aug 13 | Prisma Access Agent: Anti-Tamper Protection Bypass on Windows |
| CVE-2026-0292 | PA Prisma Access Agent Paloaltonetworks | 6.0 | Aug 13 | Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows |
| CVE-2026-0291 | PA Prisma Access Agent Paloaltonetworks | 4.4 | Aug 13 | Prisma Access Agent: Authenticated Limited File Deletion on Linux |
| CVE-2026-0290 | PB Prisma Browser Paloaltonetworks | 5.5 | Aug 13 | Prisma Browser: Sensitive Information Disclosure Vulnerability |
| CVE-2026-0289 | PB Prisma Browser Paloaltonetworks | 6.5 | Aug 13 | Prisma Browser: Inappropriate Implementation in Account Protection |
| CVE-2026-0275 | PB Prisma Browser Paloaltonetworks | 6.7 | Jul 9 | Prisma Browser: Local Privilege Escalation on macOS |
| CVE-2026-0276 | CX Cortex Xdr Broker VM Paloaltonetworks | 7.8 | Jul 9 | Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability |
| CVE-2026-0277 | PA Prisma Access Agent Paloaltonetworks | 5.9 | Jul 9 | Prisma Access Agent: Improper Certificate Validation on iOS |
| CVE-2026-0278 | PA Prisma Access Agent Paloaltonetworks | 7.8 | Jul 9 | Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows |
| CVE-2026-0287 | CN Cloud Ngfw Paloaltonetworks | 7.5 | Jul 9 | PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing |
| CVE-2026-45169 | IP Idira Privileged Access Manager Vault Paloaltonetworks | 8.6 | Jun 12 | Idira Privileged Access Manager (PAM) Self-Hosted Vault: Denial of Service due to Unexpected Input Processing |
| CVE-2026-45170 | IP Idira Privilege Cloud Connector Paloaltonetworks | 8.8 | Jun 12 | Idira Vendor PAM - Self-Hosted Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation |
| CVE-2026-45171 | IP Idira Privileged Session Manager Paloaltonetworks | 8.8 | Jun 11 | Idira Privileged Session Manager (PSM): Potential Code Execution due to an Incomplete Input Validation |
| CVE-2026-45172 | IP Idira Privileged Session Manager For Ssh Paloaltonetworks | 8.8 | Jun 11 | Idira Privileged Session Manager for SSH (PSMP): Arbitrary Command Execution via Improper Neutralization of Special Elements used in an OS Command |
| CVE-2026-45173 | II Idira Identity Browser Extension Paloaltonetworks | 6.5 | Jun 11 | Idira Identity Browser Extension: Unauthorized Application Interaction via Origin Validation Failure |
| CVE-2026-45174 | IE Idira Endpoint Privilege Manager Paloaltonetworks | 7.8 | Jun 11 | Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon Initialization |
| CVE-2026-45175 | IE Idira Endpoint Privilege Manager Paloaltonetworks | 7.8 | Jun 11 | Idira Endpoint Privilege Manager Agent: Security Control and Cryptographic Validation Bypass in Internal Agent Validation Processes |
| CVE-2026-45176 | IE Idira Endpoint Privilege Manager Paloaltonetworks | 7.8 | Jun 11 | Idira Endpoint Privilege Manager Agent: Local Privilege Escalation via Internal Communication or File Operation Manipulation |
| CVE-2026-45177 | IS Idira Secrets Manager Edge Paloaltonetworks | 9.1 | Jun 11 | Idira Secrets Manager SaaS Edge: Authentication Bypass of an internal validation mechanism |
| CVE-2026-45178 | IS Idira Secrets Manager Credential Providers Paloaltonetworks | 8.1 | Jun 11 | Idira Secrets Manager Self-Hosted: Improper Access Control in Internal Cluster Endpoints |
| CVE-2026-0274 | CX Cortex Xsoar Commvaultsecurityiq Marketplace Paloaltonetworks | 9.1 | Jun 10 | Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration |
| CVE-2026-0271 | PA Prisma Access Agent Paloaltonetworks | 7.8 | Jun 10 | Prisma Access Agent: Local Privilege Escalation by Authorized Users |
| CVE-2026-0270 | CX Cortex Xsoar Paloaltonetworks | 7.5 | Jun 10 | Cortex XSOAR: Path Traversal Vulnerability |
| CVE-2026-0268 | PA Prisma Access Agent Paloaltonetworks | 4.4 | Jun 10 | Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux |
| CVE-2026-0243 | PS Prisma Sd-wan Paloaltonetworks | 6.5 | May 13 | Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet |
| CVE-2026-0248 | PA Prisma Access Agent Paloaltonetworks | 5.9 | May 13 | Prisma Access Agent: Improper Certificate Validation Vulnerability |
| CVE-2026-0244 | PS Prisma Sd-wan Paloaltonetworks | 8.1 | May 13 | Prisma SD-WAN: Improper Certificate Validation Vulnerability |
| CVE-2026-0241 | TP Trust Protection Foundation Paloaltonetworks | 7.2 | May 13 | Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities |
| CVE-2026-0245 | PA Prisma Access Agent Paloaltonetworks | 5.5 | May 13 | Prisma Access Agent: Information Disclosure Vulnerabilities |
| CVE-2026-0240 | TP Trust Protection Foundation Paloaltonetworks | 8.7 | May 13 | Trust Protection Foundation: Sensitive Information Disclosure Vulnerability |
| CVE-2026-0246 | PA Prisma Access Agent Paloaltonetworks | 7.8 | May 13 | Prisma Access Agent: Local Privilege Escalation Vulnerability |
| CVE-2026-0247 | PA Prisma Access Agent Paloaltonetworks | 7.8 | May 13 | Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities |
| CVE-2026-0239 | CC Chronosphere Collector Paloaltonetworks | 6.5 | May 13 | Chronosphere Chronocollector Information Disclosure Vulnerability |
| CVE-2026-0238 | BV Broker VM Paloaltonetworks | 3.2 | May 13 | Broker VM: Improper Input Validation in Broker VM Certificate and Key Fields |
| CVE-2026-0257 RansomwareIn wildKEV | PA Prisma Access Paloaltonetworks | 9.1 | May 13 | PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities |
| CVE-2026-0235 | PB Prisma Browser Paloaltonetworks | 4.7 | May 13 | Prisma Browser: Access and Data Rule Bypass |
| CVE-2026-0236 | PB Prisma Browser Paloaltonetworks | 7.8 | May 13 | Prisma Browser: Code Injection Enables Security Controls Bypass |
| CVE-2026-0237 | PB Prisma Browser Paloaltonetworks | 7.8 | May 13 | Prisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass |
| CVE-2026-0232 | CX Cortex Xdr Agent Paloaltonetworks | 4.4 | Apr 13 | Cortex XDR Agent: Local Administrator can disable the agent on Windows |
| CVE-2026-0233 | AD Autonomous Digital Experience Manager Paloaltonetworks | 8.8 | Apr 13 | Autonomous Digital Experience Manager: Improper validation of ADEM certificate |
| CVE-2026-0234 | CX Cortex Xsoar Paloaltonetworks | 9.1 | Apr 13 | Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration |
| CVE-2026-0227 | PA Prisma Access Paloaltonetworks | 7.5 | Jan 15 | A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall |
| CVE-2024-3393 In wildKEV | PA Prisma Access Paloaltonetworks | 7.5 | Dec 27 | PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet |
| CVE-2024-9469 | CX Cortex Xdr Agent Paloaltonetworks | 5.5 | Oct 9 | A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent |
| CVE-2024-8690 | CX Cortex Xdr Agent Paloaltonetworks | 4.4 | Sep 11 | A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent |
| CVE-2024-8687 | PA Prisma Access Paloaltonetworks | 7.1 | Sep 11 | An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall… |
| CVE-2024-5914 | CX Cortex Xsoar Commonscripts Paloaltonetworks | 9.8 | Aug 14 | A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to execute arbitrary commands within the context of an… |
| CVE-2024-5909 | CX Cortex Xdr Agent Paloaltonetworks | 5.5 | Jun 12 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent |
| CVE-2024-5907 | CX Cortex Xdr Agent Paloaltonetworks | 7.0 | Jun 12 | A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges |
| CVE-2024-5906 | PC Prisma Cloud Paloaltonetworks | 4.8 | Jun 12 | A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/edit permissions for identity providers… |
| CVE-2024-5905 | CX Cortex Xdr Agent Paloaltonetworks | 4.4 | Jun 12 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low privileged Windows user to disrupt some functionality of the… |
| CVE-2024-3388 | PA Prisma Access Paloaltonetworks | 5.0 | Apr 10 | A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to… |
| CVE-2023-3282 | CX Cortex Xsoar Paloaltonetworks | 6.7 | Nov 8 | A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute… |
| CVE-2023-3280 | CX Cortex Xdr Agent Paloaltonetworks | 5.5 | Sep 13 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent |
| CVE-2023-0003 | CX Cortex Xsoar Paloaltonetworks | 6.5 | Feb 8 | A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the… |
| CVE-2023-0002 | CX Cortex Xdr Agent Paloaltonetworks | 7.8 | Feb 8 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or… |