Palo Alto Networks
Vulnerability activity for Palo Alto Networks: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 14
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 1
- With exploit code
- 0
Last 90 days
- CVEs
- 27
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 1
- With exploit code
- 0
Last 365 days
- CVEs
- 30
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 3
- With exploit code
- 1
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 8.6HighOct 14, 2026Palo Alto Networks PAN-OS Code / command injectionCVE-2026-0322Firewalls running Palo Alto Networks PAN-OS versions 10.2.0 and earlier are affected. An attacker gains arbitrary code execution and can inject malicious code into the firewall's configuration. Apply the latest PAN-OS version 10.2.1 or later to mitigate the vulnerability.Added to KEV Oct 14, 2026Exploited1.2% likely
- 7.8HighMay 29, 2026Palo Alto Networks PAN-OS Auth bypass / access controlCVE-2026-0257Affected: Palo Alto Networks PAN-OS devices with versions prior to 10.2.5. Attacker gains: Unauthorized access to the device and its network resources. Recommended action: Update PAN-OS to version 10.2.5 or later, and apply the relevant patches.Added to KEV May 29, 2026Exploited97% likelyExploit codeNucleiDetection
- 9.3CriticalMay 6, 2026Palo Alto Networks PAN-OS Memory corruptionCVE-2026-0300Palo Alto Networks PAN-OS software is affected. An attacker gains arbitrary code execution and system compromise. Patch PAN-OS to version 10.2.4 or later to mitigate the vulnerability.Added to KEV May 6, 2026Exploited42% likely
- 7.1HighFeb 12, 2025Palo Alto Networks PAN-OS Path traversal / file handlingCVE-2025-0111Firewalls running Palo Alto Networks PAN-OS versions 10.1.4-h1 and earlier are affected. An attacker can gain access to sensitive files on the firewall, including configuration and log files. Apply the latest PAN-OS patches and ensure all firewalls are running version 10.2.0 or later.Added to KEV Feb 20, 2025 · 7 days after publicationExploited2% likely
- 8.8HighFeb 12, 2025Palo Alto Networks PAN-OS Auth bypass / access controlCVE-2025-0108(1) Palo Alto Networks PAN-OS systems are affected. (2) An attacker gains unauthorized access to the system. (3) Update PAN-OS to the latest version available.Added to KEV Feb 18, 2025 · 5 days after publicationExploited98% likelyExploit codeNucleiDetection
- 8.7HighDec 27, 2024Palo Alto Networks PAN-OSCVE-2024-3393Firewall devices running Palo Alto Networks PAN-OS versions prior to 11.2.6 and 11.3.2. An attacker gains the ability to bypass security features and execute arbitrary code. Apply the latest PAN-OS updates to versions 11.2.6 or 11.3.2, and ensure all firewalls are up to date.Added to KEV Dec 30, 2024 · 3 days after publicationExploited29% likely
- 9.3CriticalNov 18, 2024Palo Alto Networks PAN-OS Auth bypass / access controlCVE-2024-0012Network devices with Palo Alto Networks PAN-OS 10.2.0 and earlier are affected. An attacker gains unauthorized access to the management interface and potentially the entire network. Apply the latest PAN-OS 10.2.1 or later patch and ensure all devices are up to date.Added to KEV Nov 18, 2024 · same day as publicationExploited100% likelyExploit codeMetasploit · NucleiDetection
- 6.9MediumNov 18, 2024Palo Alto Networks PAN-OS Code / command injectionCVE-2024-9474(1) The Palo Alto Networks PAN-OS Management Interface is affected. (2) An attacker gains the ability to inject and execute arbitrary OS commands. (3) Update PAN-OS to the latest version and ensure all patches are applied.Added to KEV Nov 18, 2024 · same day as publicationExploited94% likelyExploit codeMetasploit · NucleiDetection
- 9.9CriticalOct 9, 2024Palo Alto Networks Expedition Code / command injectionCVE-2024-9463Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.Added to KEV Nov 14, 2024 · 35 days after publicationExploited99% likelyExploit codeNucleiDetection
- 9.2CriticalOct 9, 2024Palo Alto Networks Expedition SQL injectionCVE-2024-9465Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.Added to KEV Nov 14, 2024 · 35 days after publicationExploited100% likelyExploit codeNucleiDetection
- 9.3CriticalJul 10, 2024Palo Alto Networks Expedition Auth bypass / access controlCVE-2024-5910Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data.Added to KEV Nov 7, 2024 · 119 days after publicationExploited92% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
- 10.0CriticalApr 12, 2024Palo Alto Networks PAN-OS Code / command injectionCVE-2024-3400Palo Alto Networks PAN-OS devices are affected. An attacker gains unauthenticated, remote code execution. Patch PAN-OS to the latest version and implement network segmentation.Added to KEV Apr 12, 2024 · same day as publicationExploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
- 8.6HighAug 10, 2022Palo Alto Networks PAN-OS Denial of serviceCVE-2022-0028Palo Alto Networks PAN-OS software. An attacker gains the ability to cause a denial-of-service condition on the affected system. Update to PAN-OS 10.2.0 or later.Added to KEV Aug 22, 2022 · 11 days after publicationExploited2.7% likely
- 9.8CriticalDec 11, 2017Palo Alto Networks PAN-OS Code / command injectionCVE-2017-15944Firewall devices running Palo Alto Networks PAN-OS versions prior to 8.0.14, 8.1.10, 9.0.2, and 9.0.3. An attacker gains remote code execution on the affected firewall device. Apply the latest PAN-OS patches or upgrades to PAN-OS versions 8.0.14, 8.1.10, 9.0.2, and 9.0.3.Added to KEV Aug 18, 2022 · 1,710 days after publicationExploited98% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
- 10.0CriticalJun 29, 2020Palo Alto Networks PAN-OS Crypto / certificateCVE-2020-2021(1) Palo Alto Networks PAN-OS software is affected. (2) An attacker gains unauthorized access to the system. (3) Update PAN-OS to a version that has the patch for CVE-2020-2021.Added to KEV Mar 25, 2022 · 633 days after publicationExploited4.4% likely
- 8.1HighJul 19, 2019Palo Alto Networks PAN-OS Code / command injectionCVE-2019-1579Palo Alto Networks PAN-OS devices are affected. An attacker gains remote code execution and potentially full control of the device. Patch PAN-OS to the latest version and apply recommended security updates.Added to KEV Jan 10, 2022 · 905 days after publicationExploited46% likelyExploit code
Recent
- –UnscoredOct 16, 2026Palo Alto NetworksADV-cccs-276014a37ea5Serial number: AV26-1056 Date: October 16, 2026 As of October 15, 2026, Palo Alto Networks is affected by a vulnerability in the following product: Idira Secrets Manager (Self-Hosted) Prior to v13.9.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Idira Secrets Manager - Version 13.9.1 Palo Alto Networks Security Advisories
- 1.1LowOct 14, 2026Palo Alto Networks Checkov by Prisma Cloud SSRFCVE-2026-0311A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.
- 4.3MediumOct 14, 2026Palo Alto Networks Checkov by Prisma Cloud Path traversal / file handlingCVE-2026-0312Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.
- 6.1MediumOct 14, 2026Palo Alto Networks Cortex XSOAR OS Query Code / command injectionCVE-2026-0313A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.
- 4.3MediumOct 14, 2026Palo Alto Networks GlobalProtect App Memory corruptionCVE-2026-0314A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.
- 5.9MediumOct 14, 2026Palo Alto Networks GlobalProtect App Privilege escalationCVE-2026-03151. The Palo Alto Networks GlobalProtect app on macOS is affected. 2. An attacker gains root privileges on the macOS system. 3. Update the GlobalProtect app to the latest version and restrict user permissions.
- 1.1LowOct 14, 2026Palo Alto Networks Cloud NGFW XSSCVE-2026-0316A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. The security risk posed by this issue is minimized when the management interface is restricted
- 1.2LowOct 14, 2026Palo Alto Networks Cloud NGFW Denial of serviceCVE-2026-0317A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service (DoS) condition by sending a specially crafted API request. The security risk posed by this issue is significantly minimized by rest
- 4.6MediumOct 14, 2026Palo Alto Networks Cloud NGFW Memory corruptionCVE-2026-0318Affected: Palo Alto Networks PAN-OS software on Panorama. Attacker gains: Ability to cause a denial of service (DoS) condition, forcing Panorama to enter maintenance mode. Recommended action: Apply the latest available patch or software update to mitigate the vulnerability.
- 4.9MediumOct 14, 2026Palo Alto Networks Cloud NGFWCVE-2026-0319(1) Palo Alto Networks PAN-OS software is affected, specifically the GlobalProtect gateway. (2) An attacker gains the ability to impersonate another user's identity within the GlobalProtect session. (3) Upgrade to a fixed version of PAN-OS software to mitigate this vulnerability.
- 6.1MediumOct 14, 2026Palo Alto Networks Cloud NGFW Code / command injectionCVE-2026-0320Palo Alto Networks PAN-OS software is affected. An attacker gains root access and ability to run arbitrary commands. Update PAN-OS software to the latest version to mitigate this vulnerability.
- 6.6MediumOct 14, 2026Palo Alto Networks Cloud NGFW Denial of serviceCVE-2026-0321Palo Alto Networks PAN-OS software dataplane interface. An attacker gains the ability to cause a denial of service (DoS) condition. Upgrade to the latest PAN-OS software version.
- –UnscoredOct 14, 2026Palo Alto NetworksADV-paloalto-8659f7a18c3cPAN-SA-2026-0013 Chromium: Monthly Vulnerability Update (October 2026) (Severity: HIGH)
- 8.6HighOct 14, 2026Palo Alto Networks PAN-OS Code / command injectionCVE-2026-0322Firewalls running Palo Alto Networks PAN-OS versions 10.2.0 and earlier are affected. An attacker gains arbitrary code execution and can inject malicious code into the firewall's configuration. Apply the latest PAN-OS version 10.2.1 or later to mitigate the vulnerability.Exploited1.2% likely
- 2.4LowSep 10, 2026Palo Alto Networks Checkov by Prisma Cloud Code / command injectionCVE-2026-0303A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.
- 4.8MediumSep 10, 2026Palo Alto Networks Cortex XDR Broker VM Code / command injectionCVE-2026-0304A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM) access to execute code with root privileges on the Broker VM.
- 4.3MediumSep 10, 2026Palo Alto Networks Prisma Access Agent Information disclosureCVE-2026-0305An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected.
- 5.8MediumSep 10, 2026Palo Alto Networks Prisma Access AgentCVE-2026-0306A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data. This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not
- 5.9MediumSep 10, 2026Palo Alto Networks GlobalProtect App Privilege escalationCVE-2026-0307Affected: Palo Alto Networks GlobalProtect app on Windows, macOS, and Linux. Attacker gain: Elevated privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux, allowing arbitrary command execution. Recommended action: Update to the latest version of the Palo Alto Networks GlobalProtect app.
- 1.1LowSep 10, 2026Palo Alto Networks Cloud NGFW XSSCVE-2026-0308A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panoram
- 4.0MediumSep 10, 2026Palo Alto Networks Cloud NGFW Code / command injectionCVE-2026-0309A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured wit
- 7.2HighSep 10, 2026Palo Alto Networks Cloud NGFW Memory corruptionCVE-2026-0310Affected: Palo Alto Networks PAN-OS software, specifically the XML processing functionality of VM-Series firewalls. Attacker gains: Ability to cause a denial of service (DoS) or execute arbitrary code. Recommended action: Update to the latest PAN-OS software version that includes the CVE-2026-0310 patch.
- 5.9MediumAug 13, 2026Palo Alto Networks GlobalProtect App Privilege escalationCVE-2026-0299Affected: Palo Alto Networks GlobalProtect app on Windows, macOS, and Linux. Attacker gain: Elevated privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux, allowing arbitrary command execution. Recommended action: Apply Palo Alto Networks' security updates to the GlobalProtect app, or disable the affected feature until a fix is available.
- 5.2MediumAug 13, 2026Palo Alto Networks GlobalProtect App Code / command injectionCVE-2026-0298Affected: Windows devices with the Palo Alto Networks GlobalProtect app installed. Attacker gains: Execution of arbitrary code with SYSTEM privileges. Recommended action: Update the GlobalProtect app to the latest version that addresses CVE-2026-0298.
- 5.2MediumAug 13, 2026Palo Alto Networks GlobalProtect App Memory corruptionCVE-2026-0297GlobalProtect app for Windows and macOS. An attacker gains SYSTEM privileges on Windows and root privileges on macOS. Update the GlobalProtect app to the latest version.
- 4.5MediumAug 13, 2026Palo Alto Networks GlobalProtect App Crypto / certificateCVE-2026-0296Affected: GlobalProtect app on iOS, Android, and Chrome devices. Attacker gain: Unauthenticated MitM access to intercept and modify application communications. Recommended action: Update to the latest version of the GlobalProtect app.
- 4.1MediumAug 13, 2026Palo Alto Networks GlobalProtect AppCVE-2026-0295A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.
- 7.8HighMay 29, 2026Palo Alto Networks PAN-OS Auth bypass / access controlCVE-2026-0257Affected: Palo Alto Networks PAN-OS devices with versions prior to 10.2.5. Attacker gains: Unauthorized access to the device and its network resources. Recommended action: Update PAN-OS to version 10.2.5 or later, and apply the relevant patches.Exploited97% likelyExploit codeNucleiDetection
- 5.2MediumMay 13, 2026Palo Alto Networks GlobalProtect App Memory corruptionCVE-2026-0250GlobalProtect app, SYSTEM privileges, Update to the latest version.
- 9.3CriticalMay 6, 2026Palo Alto Networks PAN-OS Memory corruptionCVE-2026-0300Palo Alto Networks PAN-OS software is affected. An attacker gains arbitrary code execution and system compromise. Patch PAN-OS to version 10.2.4 or later to mitigate the vulnerability.Exploited42% likely
- 7.1HighFeb 12, 2025Palo Alto Networks PAN-OS Path traversal / file handlingCVE-2025-0111Firewalls running Palo Alto Networks PAN-OS versions 10.1.4-h1 and earlier are affected. An attacker can gain access to sensitive files on the firewall, including configuration and log files. Apply the latest PAN-OS patches and ensure all firewalls are running version 10.2.0 or later.Exploited2% likely
- 8.8HighFeb 12, 2025Palo Alto Networks PAN-OS Auth bypass / access controlCVE-2025-0108(1) Palo Alto Networks PAN-OS systems are affected. (2) An attacker gains unauthorized access to the system. (3) Update PAN-OS to the latest version available.Exploited98% likelyExploit codeNucleiDetection
- 8.7HighDec 27, 2024Palo Alto Networks PAN-OSCVE-2024-3393Firewall devices running Palo Alto Networks PAN-OS versions prior to 11.2.6 and 11.3.2. An attacker gains the ability to bypass security features and execute arbitrary code. Apply the latest PAN-OS updates to versions 11.2.6 or 11.3.2, and ensure all firewalls are up to date.Exploited29% likely
- 6.9MediumNov 18, 2024Palo Alto Networks PAN-OS Code / command injectionCVE-2024-9474(1) The Palo Alto Networks PAN-OS Management Interface is affected. (2) An attacker gains the ability to inject and execute arbitrary OS commands. (3) Update PAN-OS to the latest version and ensure all patches are applied.Exploited94% likelyExploit codeMetasploit · NucleiDetection
- 9.3CriticalNov 18, 2024Palo Alto Networks PAN-OS Auth bypass / access controlCVE-2024-0012Network devices with Palo Alto Networks PAN-OS 10.2.0 and earlier are affected. An attacker gains unauthorized access to the management interface and potentially the entire network. Apply the latest PAN-OS 10.2.1 or later patch and ensure all devices are up to date.Exploited100% likelyExploit codeMetasploit · NucleiDetection
- 9.2CriticalOct 9, 2024Palo Alto Networks Expedition SQL injectionCVE-2024-9465Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.Exploited100% likelyExploit codeNucleiDetection
- 9.9CriticalOct 9, 2024Palo Alto Networks Expedition Code / command injectionCVE-2024-9463Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.Exploited99% likelyExploit codeNucleiDetection
- 9.3CriticalJul 10, 2024Palo Alto Networks Expedition Auth bypass / access controlCVE-2024-5910Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data.Exploited92% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
- 10.0CriticalApr 12, 2024Palo Alto Networks PAN-OS Code / command injectionCVE-2024-3400Palo Alto Networks PAN-OS devices are affected. An attacker gains unauthenticated, remote code execution. Patch PAN-OS to the latest version and implement network segmentation.Exploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
- 8.6HighAug 10, 2022Palo Alto Networks PAN-OS Denial of serviceCVE-2022-0028Palo Alto Networks PAN-OS software. An attacker gains the ability to cause a denial-of-service condition on the affected system. Update to PAN-OS 10.2.0 or later.Exploited2.7% likely
- 9.8CriticalDec 11, 2017Palo Alto Networks PAN-OS Code / command injectionCVE-2017-15944Firewall devices running Palo Alto Networks PAN-OS versions prior to 8.0.14, 8.1.10, 9.0.2, and 9.0.3. An attacker gains remote code execution on the affected firewall device. Apply the latest PAN-OS patches or upgrades to PAN-OS versions 8.0.14, 8.1.10, 9.0.2, and 9.0.3.Exploited98% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
- 10.0CriticalJun 29, 2020Palo Alto Networks PAN-OS Crypto / certificateCVE-2020-2021(1) Palo Alto Networks PAN-OS software is affected. (2) An attacker gains unauthorized access to the system. (3) Update PAN-OS to a version that has the patch for CVE-2020-2021.Exploited4.4% likely
- 8.1HighJul 19, 2019Palo Alto Networks PAN-OS Code / command injectionCVE-2019-1579Palo Alto Networks PAN-OS devices are affected. An attacker gains remote code execution and potentially full control of the device. Patch PAN-OS to the latest version and apply recommended security updates.Exploited46% likelyExploit code
Top products
- GlobalProtect App9 CVEs in the last year
- Cloud NGFW9 CVEs in the last year
- PAN-OS3 CVEs in the last year, 1 critical, 3 exploited
- Checkov by Prisma Cloud3 CVEs in the last year
- Prisma Access Agent2 CVEs in the last year
- Cortex XSOAR OS Query1 CVE in the last year
- Cortex XDR Broker VM1 CVE in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- Palo Alto Networks · Oct 17, 2026CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)CVE-2026-0307
- CCCS (Canada) · Oct 16, 2026Palo Alto Networks security advisory (AV26-1056)ADV-cccs-276014a37ea5
- Palo Alto Networks · Oct 15, 2026CVE-2026-0317 PAN-OS: Denial of Service Vulnerability (Severity: LOW)CVE-2026-0317
- Palo Alto Networks · Oct 15, 2026CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH)CVE-2026-0322
- Palo Alto Networks · Oct 15, 2026CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM)CVE-2026-0321
- Palo Alto Networks · Oct 15, 2026CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM)CVE-2026-0320
- CCCS (Canada) · Oct 15, 2026Palo Alto Networks security advisory (AV26-1041) - Update 1CVE-2026-0322
- Palo Alto Networks · Oct 14, 2026CVE-2026-0314 GlobalProtect App: Local Denial of Service (DoS) on Windows (Severity: MEDIUM)CVE-2026-0314
- Palo Alto Networks · Oct 14, 2026CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability (Severity: MEDIUM)CVE-2026-0319
- Palo Alto Networks · Oct 14, 2026PAN-SA-2026-0013 Chromium: Monthly Vulnerability Update (October 2026) (Severity: HIGH)ADV-paloalto-8659f7a18c3c
- Palo Alto Networks · Oct 14, 2026CVE-2026-0316 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability (Severity: LOW)CVE-2026-0316
- Palo Alto Networks · Oct 14, 2026CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama (Severity: MEDIUM)CVE-2026-0318
- Palo Alto Networks · Oct 14, 2026CVE-2026-0315 GlobalProtect App: Local Privilege Escalation Vulnerability on macOS (Severity: MEDIUM)CVE-2026-0315
- Palo Alto Networks · Oct 14, 2026CVE-2026-0312 Checkov by Prisma Cloud: Path Traversal Vulnerabilities (Severity: MEDIUM)CVE-2026-0312
- Palo Alto Networks · Oct 14, 2026CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability (Severity: MEDIUM)CVE-2026-0313
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.