Palo Alto Networks Cloud NGFW

• CVE-2026-0322 High 8.6 Exploited PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface 1.7%
• CVE-2026-0257 High 7.8 Exploited PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities 95.6%
• CVE-2026-0300 Critical 9.3 Exploited PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal 41.7%
• CVE-2025-0111 High 7.1 Exploited PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface 2.0%
• CVE-2025-0108 High 8.8 Exploited PAN-OS: Authentication Bypass in the Management Web Interface 98.5%
• CVE-2024-3393 High 8.7 Exploited PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet 29.1%
• CVE-2024-9474 Medium 6.9 Exploited PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface 93.8%
• CVE-2024-0012 Critical 9.3 Exploited PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) 99.8%
• CVE-2024-3400 Critical 10.0 Exploited PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect 100.0%
• CVE-2022-0028 High 8.6 Exploited PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering 2.7%
• CVE-2026-0316 Low 1.1 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability 0.3%
• CVE-2026-0317 Low 1.2 PAN-OS: Denial of Service Vulnerability 0.3%
• CVE-2026-0318 Medium 4.6 PAN-OS: Denial of Service (DoS) on Panorama 0.3%
• CVE-2026-0319 Medium 4.9 PAN-OS: Improper Input Handling Vulnerability 0.3%
• CVE-2026-0320 Medium 6.1 PAN-OS: Authenticated Admin Command Injection Vulnerability 0.8%
• CVE-2026-0321 Medium 6.6 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services 0.3%
• CVE-2026-0308 Low 1.1 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface 0.5%
• CVE-2026-0309 Medium 4.0 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration 0.8%
• CVE-2026-0310 High 7.2 PAN-OS: Buffer Overflow Vulnerability via XML Processing 0.7%
• CVE-2026-0301 Low 1.7 PAN-OS: Information Disclosure Vulnerability in URL Filtering 0.6%
• CVE-2026-0279 Low 1.3 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities 0.8%
• CVE-2026-0280 Low 1.7 PAN-OS: IPv6 Firewall Policy Bypass 0.3%
• CVE-2026-0281 Low 2.1 PAN-OS: Information Disclosure Vulnerability in Management Web Interface 0.3%
• CVE-2026-0282 Low 2.7 PAN-OS: File Deletion Vulnerability in Management Web Interface 0.3%
• CVE-2026-0283 Medium 4.5 PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) 0.4%
• CVE-2026-0284 Medium 4.7 PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN) 0.5%
• CVE-2026-0285 Medium 4.7 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface 0.4%
• CVE-2026-0286 Medium 6.0 PAN-OS: Authenticated Command Injection in CLI 1.7%
• CVE-2026-0287 Medium 6.6 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing 0.6%
• CVE-2026-0288 High 7.2 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent 0.8%
• CVE-2026-0273 Medium 6.1 PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI 1.3%
• CVE-2026-0272 Medium 6.0 PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI) 0.3%
• CVE-2026-0269 Medium 4.6 PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing 0.2%
• CVE-2026-0266 Low 1.1 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface 0.1%
• CVE-2026-0256 Medium 4.4 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface 0.2%
• CVE-2026-0258 Medium 4.8 PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching 0.3%
• CVE-2026-0261 Medium 6.1 PAN-OS: Authenticated Admin Command Injection Vulnerability 1.4%
• CVE-2026-0262 Medium 6.6 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing 0.4%
• CVE-2026-0263 High 7.2 PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing 0.4%
• CVE-2026-0264 High 7.2 PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution 0.5%
• CVE-2026-0265 High 7.2 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled 1.1%
• CVE-2026-0229 Medium 6.6 PAN-OS: Denial of Service in Advanced DNS Security Feature 0.6%
• CVE-2026-0228 Low 1.3 PAN-OS: Improper Validation of Terminal Server Agent Certificate 0.2%
• CVE-2026-0227 Medium 6.6 PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal 0.7%
• CVE-2025-4619 Medium 6.6 PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Packets 0.6%
• CVE-2025-4615 Medium 5.4 PAN-OS: Improper Neutralization of Input in the Management Web Interface 0.8%
• CVE-2025-4614 Medium 4.8 PAN-OS: Session Token Disclosure Vulnerability 0.3%
• CVE-2025-2182 Medium 5.6 PAN-OS: Firewall Clusters using the MACsec Protocol Expose the Connectivity Association Key (CAK) 0.1%
• CVE-2025-4229 Medium 6.0 PAN-OS: Traffic Information Disclosure Vulnerability 0.5%
• CVE-2025-4230 High 8.4 PAN-OS: Authenticated Admin Command Injection Vulnerability Through CLI 0.6%