What’s Vulnerable › Products
Palo Alto Networks Prisma Access vulnerabilities
18 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.
Check whether your Palo Alto Networks Prisma Access version is affected
Exploited Palo Alto Networks Prisma Access vulnerabilities
- CVE-2026-0257 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
- CVE-2024-3393 — Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
Latest Palo Alto Networks Prisma Access vulnerabilities
- CVE-2026-0319 — PAN-OS: Improper Input Handling Vulnerability (CVSS 4.9)
- CVE-2026-0321 — PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (CVSS 6.6)
- CVE-2026-0310 — PAN-OS: Buffer Overflow Vulnerability via XML Processing (CVSS 7.2)
- CVE-2026-0308 — PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (CVSS 1.1)
- CVE-2026-0301 — PAN-OS: Information Disclosure Vulnerability in URL Filtering (CVSS 7.5)
- CVE-2026-0257 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability (CVSS 9.1) — exploited
- CVE-2026-0228 — PAN-OS: Improper Validation of Terminal Server Agent Certificate (CVSS 1.3)
- CVE-2026-0227 — PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal (CVSS 7.5)
- CVE-2025-4619 — PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Packets (CVSS 6.6)
- CVE-2025-0133 — PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal (CVSS 2.7)
- CVE-2025-0128 — PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet (CVSS 8.7)
- CVE-2025-0126 — PAN-OS: Session Fixation Vulnerability in GlobalProtect SAML Login (CVSS 8.3)
- CVE-2024-3393 — Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability (CVSS 7.5) — exploited
- CVE-2024-8687 — PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes (CVSS 7.1)
- CVE-2024-3388 — PAN-OS: User Impersonation in GlobalProtect SSL VPN (CVSS 5.0)
- CVE-2022-0011 — PAN-OS: URL Category Exceptions Match More URLs Than Intended in URL Filtering (CVSS 6.5)
- CVE-2021-3061 — PAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI) (CVSS 7.2)
- CVE-2021-3060 — PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP) (CVSS 8.1)