Palo Alto Networks — Security Activity Report
PAN-OS, GlobalProtect, Prisma, Cortex (PSIRT advisories)
Generated Aug 20, 2026Cohort: 9 vendors with ≥10 CVE advisoriesMethodology ↗
CVE Disclosure Volume
Total all-time: 56 CVEs with Palo Alto Networks advisories. Source: NVD CVE records joined with vendor advisory publish dates.
Severity Composition
at industry median53.6% of Palo Alto Networks's 56 CVEs are CRITICAL or HIGH severity. Industry median: 53.6%. Source: NVD CVSS v3.1.
CISA KEV Listings
↑ +2.7 pp2 of 56 Palo Alto Networks CVEs in the last 3 years are on CISA's Known Exploited Vulnerabilities catalog (3.6%). Industry median: 0.9%.
Source: CISA Known Exploited Vulnerabilities catalog (current snapshot). KEV listing means CISA observed active in-the-wild exploitation.
Vendor Patch Velocity
↑ +0.1 daysMedian time from CVE disclosure to Palo Alto Networks advisory: 7 days (p25 7 days – p75 7 days). Industry median: 7 days.
Sample size: 10 CVE→advisory pairs over the last 3 years. Source: vendor advisory published_at minus CVE published.
Top Recurring Weakness Classes
Most-frequently mapped CWEs across Palo Alto Networks's last 3 years of CVE disclosures. Source: NVD — CWE mapping per MITRE taxonomy.
Recent Security Advisories
Latest advisories published by Palo Alto Networks, straight from the vendor's own feed. Severity labels are the vendor's — scales differ across vendors.
- CVE-2026-0293MediumAug 12, 2026
CVE-2026-0293 Prisma Access Agent: Anti-Tamper Protection Bypass on Windows
- PAN-SA-2026-0011HighAug 12, 2026
PAN-SA-2026-0011 Chromium: Monthly Vulnerability Update (August 2026)
- CVE-2026-0295MediumAug 12, 2026
CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
- CVE-2026-0291LowAug 12, 2026
CVE-2026-0291 Prisma Access Agent: Authenticated Limited File Deletion on Linux
- CVE-2026-0297MediumAug 12, 2026
CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
- CVE-2026-0299MediumAug 12, 2026
CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities
- CVE-2026-0294MediumAug 12, 2026
CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation
- CVE-2026-0296MediumAug 12, 2026
CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
Full advisory archive: /pulse/vendor-advisories →
Data sources & corrections
- NVD National Vulnerability Database (nvd.nist.gov) — CVE records + CVSS v3.1 severity
- MITRE cvelistV5 (github.com/CVEProject/cvelistV5) — CNA-published CVE timestamps
- CISA Known Exploited Vulnerabilities catalog (cisa.gov/known-exploited-vulnerabilities-catalog)
- Vendor security advisories (RHSA, USN, MSRC, GHSA, etc.) — published_at timestamps
- MITRE CWE taxonomy (cwe.mitre.org) — weakness class mappings
Snapshot generated Aug 20, 2026. Industry medians refresh every 6 hours; raw vendor counts are queried live on each request.
Spot a factual error in this report?
Email [email protected] with the specific number you're disputing and a link to the authoritative source. We review every report and publish corrections on the methodology page.