What’s Vulnerable › Products
Palo Alto Networks PAN-OS vulnerabilities
265 known vulnerabilities, 17 confirmed exploited in the wild (CISA KEV), 47 published in the last 12 months.
Check whether your Palo Alto Networks PAN-OS version is affected
Exploited Palo Alto Networks PAN-OS vulnerabilities
- CVE-2026-109619 — RCE via stale global state
- CVE-2026-109618 — RCE via OOM corruption
- CVE-2026-0322 — Palo Alto Networks PAN-OS Code Injection Vulnerability
- CVE-2026-0257 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
- CVE-2026-0300 — Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
- CVE-2018-14634 — Linux Kernel Integer Overflow Vulnerability
- CVE-2025-0111 — Palo Alto Networks PAN-OS File Read Vulnerability
- CVE-2025-0108 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
- CVE-2024-3393 — Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
- CVE-2024-9474 — Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
- CVE-2024-0012 — Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
- CVE-2024-3400 — Palo Alto Networks PAN-OS Command Injection Vulnerability
- CVE-2022-0028 — Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
- CVE-2017-15944 — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
- CVE-2020-2021 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
- CVE-2016-5195 — Linux Kernel Race Condition Vulnerability
- CVE-2019-1579 — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
Latest Palo Alto Networks PAN-OS vulnerabilities
- CVE-2026-109619 — RCE via stale global state (CVSS 8.1) — exploited
- CVE-2026-109618 — RCE via OOM corruption (CVSS 9.8) — exploited
- CVE-2026-0320 — PAN-OS: Authenticated Admin Command Injection Vulnerability (CVSS 6.1)
- CVE-2026-0319 — PAN-OS: Improper Input Handling Vulnerability (CVSS 4.9)
- CVE-2026-0318 — PAN-OS: Denial of Service (DoS) on Panorama (CVSS 4.6)
- CVE-2026-0317 — PAN-OS: Denial of Service Vulnerability (CVSS 1.2)
- CVE-2026-0316 — PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability (CVSS 1.1)
- CVE-2026-0321 — PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (CVSS 6.6)
- CVE-2026-0322 — Palo Alto Networks PAN-OS Code Injection Vulnerability (CVSS 7.2) — exploited
- CVE-2026-0310 — PAN-OS: Buffer Overflow Vulnerability via XML Processing (CVSS 7.2)
- CVE-2026-0309 — PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration (CVSS 4.0)
- CVE-2026-0308 — PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (CVSS 1.1)
- CVE-2026-0301 — PAN-OS: Information Disclosure Vulnerability in URL Filtering (CVSS 7.5)
- CVE-2026-0287 — PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing (CVSS 7.5)
- CVE-2026-0286 — PAN-OS: Authenticated Command Injection in CLI (CVSS 7.2)
- CVE-2026-0285 — PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface (CVSS 4.9)
- CVE-2026-0284 — PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN) (CVSS 9.9)
- CVE-2026-0283 — PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) (CVSS 7.2)
- CVE-2026-0282 — PAN-OS: File Deletion Vulnerability in Management Web Interface (CVSS 6.5)
- CVE-2026-0281 — PAN-OS: Information Disclosure Vulnerability in Management Web Interface (CVSS 7.1)
- CVE-2026-0280 — PAN-OS: IPv6 Firewall Policy Bypass (CVSS 7.2)
- CVE-2026-0279 — PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities (CVSS 6.1)
- CVE-2026-0288 — PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent (CVSS 7.5)
- CVE-2026-0273 — PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI (CVSS 7.2)
- CVE-2026-0272 — PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI) (CVSS 7.2)