Palo Alto Networks

Products

ProductCVEsExploitedLatest
PAN-OS19111Oct 14, 2026
Cloud NGFW11410Oct 14, 2026
Prisma Access1229Oct 14, 2026
Expedition123Jan 11, 2025
GlobalProtect App41–Oct 14, 2026
Cortex XDR Agent24–Apr 13, 2026
Prisma Access Agent14–Sep 10, 2026
Cortex XSOAR11–Jun 10, 2026
Cortex XDR Broker VM9–Sep 10, 2026
Prisma Browser9–Aug 13, 2026
GlobalProtect UWP App9–Jun 10, 2026
Panorama7–Jul 9, 2026
Checkov by Prisma Cloud6–Oct 14, 2026
Prisma Cloud Compute4–Jun 12, 2024
Global Protect Agent3–Apr 8, 2020
Trust Protection Foundation3–May 13, 2026
Prisma SD-WAN ION2–May 13, 2026
Autonomous Digital Experience Manager2–Apr 13, 2026
Bridgecrew Checkov2–Jun 10, 2021
Prisma Access Browser2–Jun 12, 2025
Traps1–Apr 8, 2020
WildFire WF-500 and WF-500-B1–May 13, 2026
Cortex XSIAM OS Query1–Oct 14, 2026
Cortex XSOAR CommonScripts1–Aug 14, 2024
ActiveMQ Content Pack1–Sep 11, 2024
Global Protect App1–May 13, 2026
Cortex XSOAR CommvaultSecurityIQ Marketplace1–Jun 10, 2026
Cortex XSIAM Microsoft Teams Marketplace1–Apr 13, 2026
Broker VM1–May 13, 2026
Idira Secrets Manager (Self-Hosted)1–Oct 15, 2026
Cortex XDR Microsoft 365 Defender Pack1–Sep 12, 2025
Global Protect UWP App1–Aug 13, 2025
VM-Series Plugin1–Apr 8, 2020
PAN-OS OpenConfig Plugin1–Feb 12, 2025
Cortex XSOAR OS Query1–Oct 14, 2026
Compute in Prisma Cloud Enterprise Edition1–May 14, 2025
Prisma SD-WAN1–Apr 11, 2025
Cortex XSIAM CommvaultSecurityIQ Marketplace1–Jun 10, 2026
GlobalProtect1–Feb 12, 2020
Cortex XSOAR Microsoft Teams Marketplace1–Apr 13, 2026
Prisma Cloud Compute Edition1–May 14, 2025
Cortex XDR1–Apr 8, 2020
Chronosphere Chronocollector1–May 13, 2026
User-ID Credential Agent1–Sep 12, 2025

Exploited and recent CVEs

  • CVE-2026-0322 High 8.6 Exploited PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface 1.7%
  • CVE-2026-0322 High 8.6 Exploited PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface 1.7%
  • CVE-2026-0322 High 8.6 Exploited PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface 1.7%
  • CVE-2026-0257 High 7.8 Exploited PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities 95.6%
  • CVE-2026-0257 High 7.8 Exploited PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities 95.6%
  • CVE-2026-0257 High 7.8 Exploited PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities 95.6%
  • CVE-2026-0300 Critical 9.3 Exploited PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal 41.7%
  • CVE-2026-0300 Critical 9.3 Exploited PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal 41.7%
  • CVE-2026-0300 Critical 9.3 Exploited PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal 41.7%
  • CVE-2025-0111 High 7.1 Exploited PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface 2.0%
  • CVE-2025-0111 High 7.1 Exploited PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface 2.0%
  • CVE-2025-0111 High 7.1 Exploited PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface 2.0%
  • CVE-2025-0108 High 8.8 Exploited PAN-OS: Authentication Bypass in the Management Web Interface 98.5%
  • CVE-2025-0108 High 8.8 Exploited PAN-OS: Authentication Bypass in the Management Web Interface 98.5%
  • CVE-2025-0108 High 8.8 Exploited PAN-OS: Authentication Bypass in the Management Web Interface 98.5%
  • CVE-2024-3393 High 8.7 Exploited PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet 29.1%
  • CVE-2024-3393 High 8.7 Exploited PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet 29.1%
  • CVE-2024-9474 Medium 6.9 Exploited PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface 93.8%
  • CVE-2024-9474 Medium 6.9 Exploited PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface 93.8%
  • CVE-2024-9474 Medium 6.9 Exploited PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface 93.8%
  • CVE-2024-0012 Critical 9.3 Exploited PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) 99.8%
  • CVE-2024-0012 Critical 9.3 Exploited PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) 99.8%
  • CVE-2024-0012 Critical 9.3 Exploited PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) 99.8%
  • CVE-2024-9465 Critical 9.2 Exploited Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure 99.6%
  • CVE-2024-9463 Critical 9.9 Exploited Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure 98.5%
  • CVE-2024-5910 Critical 9.3 Exploited Expedition: Missing Authentication Leads to Admin Account Takeover 91.7%
  • CVE-2024-3400 Critical 10.0 Exploited PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect 100.0%
  • CVE-2024-3400 Critical 10.0 Exploited PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect 100.0%
  • CVE-2024-3400 Critical 10.0 Exploited PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect 100.0%
  • CVE-2022-0028 High 8.6 Exploited PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering 2.7%