Palo Alto Networks PSIRT
PAN-OS, GlobalProtect, Prisma, WildFire, Cortex security advisories — frequent KEV-listed CVEs (CVE-2024-3400 et al).
573 advisories tracked · showing 100
- Sep 9, 2026CVE-2026-0303LowCVE-2026-0303
CVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File
- Sep 9, 2026CVE-2026-0310HighCVE-2026-0310
CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing
- Sep 9, 2026CVE-2026-0306MediumCVE-2026-0306
CVE-2026-0306 Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows
- Sep 9, 2026CVE-2026-0304MediumCVE-2026-0304
CVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability
- Sep 9, 2026PAN-SA-2026-0012HighDisclosed before NVD
PAN-SA-2026-0012 Chromium: Monthly Vulnerability Update (September 2026)
- Sep 9, 2026CVE-2026-0302LowCVE-2026-0302
CVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability
- Sep 9, 2026CVE-2026-0309MediumCVE-2026-0309
CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration
- Sep 9, 2026CVE-2026-0305MediumCVE-2026-0305
CVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux
- Sep 9, 2026CVE-2026-0307MediumCVE-2026-0307
CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities
- Sep 9, 2026CVE-2026-0308LowCVE-2026-0308
CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
- Aug 12, 2026CVE-2026-0298MediumCVE-2026-0298
CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)
- Aug 12, 2026CVE-2026-0301LowCVE-2026-0301
CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering
- Aug 12, 2026CVE-2026-0292LowCVE-2026-0292
CVE-2026-0292 Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows
- Aug 12, 2026CVE-2026-0296MediumCVE-2026-0296
CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
- Aug 12, 2026CVE-2026-0294MediumCVE-2026-0294
CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation
- Aug 12, 2026CVE-2026-0299MediumCVE-2026-0299
CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities
- Aug 12, 2026CVE-2026-0297MediumCVE-2026-0297
CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
- Aug 12, 2026CVE-2026-0291LowCVE-2026-0291
CVE-2026-0291 Prisma Access Agent: Authenticated Limited File Deletion on Linux
- Aug 12, 2026CVE-2026-0295MediumCVE-2026-0295
CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
- Aug 12, 2026PAN-SA-2026-0011HighDisclosed before NVD
PAN-SA-2026-0011 Chromium: Monthly Vulnerability Update (August 2026)
- Aug 12, 2026CVE-2026-0293MediumCVE-2026-0293
CVE-2026-0293 Prisma Access Agent: Anti-Tamper Protection Bypass on Windows
- Jul 8, 2026CVE-2026-0284MediumCVE-2026-0284
CVE-2026-0284 PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)
- Jul 8, 2026CVE-2026-0287MediumCVE-2026-0287
CVE-2026-0287 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing
- Jul 8, 2026CVE-2026-0276LowCVE-2026-0276
CVE-2026-0276 Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability
- Jul 8, 2026CVE-2026-0283MediumCVE-2026-0283
CVE-2026-0283 PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)
- Jul 8, 2026CVE-2026-0285MediumCVE-2026-0285
CVE-2026-0285 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface
- Jul 8, 2026PAN-SA-2026-0010HighDisclosed before NVD
PAN-SA-2026-0010 Chromium and Prisma Browser: Monthly Vulnerability Update (July 2026)
- Jul 8, 2026CVE-2026-0288HighCVE-2026-0288
CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent
- Jul 8, 2026CVE-2026-0278MediumCVE-2026-0278
CVE-2026-0278 Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows
- Jul 8, 2026CVE-2026-0280LowCVE-2026-0280
CVE-2026-0280 PAN-OS: IPv6 Firewall Policy Bypass
- Jul 8, 2026CVE-2026-0286MediumCVE-2026-0286
CVE-2026-0286 PAN-OS: Authenticated Command Injection in CLI
- Jul 8, 2026CVE-2026-0282LowCVE-2026-0282
CVE-2026-0282 PAN-OS: File Deletion Vulnerability in Management Web Interface
- Jul 8, 2026CVE-2026-0279LowCVE-2026-0279
CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities
- Jul 8, 2026CVE-2026-0277MediumCVE-2026-0277
CVE-2026-0277 Prisma Access Agent: Improper Certificate Validation on iOS
- Jul 8, 2026CVE-2026-0281LowCVE-2026-0281
CVE-2026-0281 PAN-OS: Information Disclosure Vulnerability in Management Web Interface
- Jun 10, 2026CVE-2026-0266LowCVE-2026-0266
CVE-2026-0266 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
- Jun 10, 2026CVE-2026-0268MediumCVE-2026-0268
CVE-2026-0268 Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux
- Jun 10, 2026CVE-2026-0274HighCVE-2026-0274
CVE-2026-0274 Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration
- Jun 10, 2026PAN-SA-2026-0009Disclosed before NVD
PAN-SA-2026-0009 Informational Bulletin: Impact assessment of OSS CVEs in Prisma SD-WAN ION (Severity: INFORMATIONAL)
- Jun 10, 2026CVE-2026-0269MediumCVE-2026-0269
CVE-2026-0269 PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing
- Jun 10, 2026CVE-2026-0273MediumCVE-2026-0273
CVE-2026-0273 PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI
- Jun 10, 2026PAN-SA-2026-0008HighDisclosed before NVD
PAN-SA-2026-0008 Chromium: Monthly Vulnerability Update (June 2026)
- Jun 10, 2026CVE-2026-0272MediumCVE-2026-0272
CVE-2026-0272 PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)
- Jun 10, 2026CVE-2026-0270MediumCVE-2026-0270
CVE-2026-0270 Cortex XSOAR: Path Traversal Vulnerability
- Jun 10, 2026CVE-2026-0267MediumCVE-2026-0267
CVE-2026-0267 GlobalProtect App: Information Exposure Vulnerability on macOS
- Jun 10, 2026CVE-2026-0271MediumCVE-2026-0271
CVE-2026-0271 Prisma Access Agent: Local Privilege Escalation by Authorized Users
- May 20, 2026CVE-2026-0264HighCVE-2026-0264
CVE-2026-0264 PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution
- May 20, 2026CVE-2026-0256MediumCVE-2026-0256
CVE-2026-0256 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
- May 20, 2026CVE-2026-0262MediumCVE-2026-0262
CVE-2026-0262 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing
- May 20, 2026CVE-2026-0258MediumCVE-2026-0258
CVE-2026-0258 PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching
- May 20, 2026CVE-2026-0265HighCVE-2026-0265
CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled
- May 20, 2026CVE-2026-0259MediumCVE-2026-0259
CVE-2026-0259 WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)
- May 20, 2026CVE-2026-0261MediumCVE-2026-0261
CVE-2026-0261 PAN-OS: Authenticated Admin Command Injection Vulnerability
- May 20, 2026CVE-2026-0257HighCVE-2026-0257
CVE-2026-0257 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
- May 19, 2026CVE-2026-0251HighCVE-2026-0251
CVE-2026-0251 GlobalProtect App: Local Privilege Escalation Vulnerabilities
- May 16, 2026CVE-2026-0300CriticalCVE-2026-0300
CVE-2026-0300 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal
- May 13, 2026CVE-2026-0240MediumCVE-2026-0240
CVE-2026-0240 Trust Protection Foundation: Sensitive Information Disclosure Vulnerability
- May 13, 2026CVE-2026-0249MediumCVE-2026-0249
CVE-2026-0249 GlobalProtect App: Certificate Validation Bypass Vulnerabilities
- May 13, 2026CVE-2026-0263HighCVE-2026-0263
CVE-2026-0263 PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing
- May 13, 2026CVE-2026-0238LowCVE-2026-0238
CVE-2026-0238 Broker VM: Improper Input Validation in Broker VM Certificate and Key Fields
- May 13, 2026PAN-SA-2026-0007MediumDisclosed before NVD
PAN-SA-2026-0007 Chromium and Prisma Browser: Monthly Vulnerability Update (May 2026)
- May 13, 2026CVE-2026-0245MediumCVE-2026-0245
CVE-2026-0245 Prisma Access Agent: Information Disclosure Vulnerabilities
- May 13, 2026CVE-2026-0239MediumCVE-2026-0239
CVE-2026-0239 Chronosphere Chronocollector Information Disclosure Vulnerability
- May 13, 2026CVE-2026-0250MediumCVE-2026-0250
CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway
- May 13, 2026CVE-2026-0244MediumCVE-2026-0244
CVE-2026-0244 Prisma SD-WAN: Improper Certificate Validation Vulnerability
- May 13, 2026CVE-2026-0248MediumCVE-2026-0248
CVE-2026-0248 Prisma Access Agent: Improper Certificate Validation Vulnerability
- May 13, 2026CVE-2026-0246MediumCVE-2026-0246
CVE-2026-0246 Prisma Access Agent: Local Privilege Escalation Vulnerability
- May 13, 2026CVE-2026-0243MediumCVE-2026-0243
CVE-2026-0243 Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet
- May 13, 2026CVE-2026-0242MediumCVE-2026-0242
CVE-2026-0242 Trust Protection Foundation: SQL Injection Vulnerability
- May 13, 2026CVE-2026-0247MediumCVE-2026-0247
CVE-2026-0247 Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities
- May 13, 2026CVE-2026-0241MediumCVE-2026-0241
CVE-2026-0241 Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities
- Apr 8, 2026PAN-SA-2026-0006Disclosed before NVD
PAN-SA-2026-0006 Informational Bulletin: Impact assessment of OSS CVEs in PAN-OS
- Apr 8, 2026PAN-SA-2026-0005Disclosed before NVD
PAN-SA-2026-0005 Informational Bulletin: Precautionary Fixes for Non-Exploitable OSS CVEs in PAN-OS
- Apr 8, 2026CVE-2026-0232MediumCVE-2026-0232
CVE-2026-0232 Cortex XDR Agent: Local Administrator can disable the agent on Windows
- Apr 8, 2026CVE-2026-0233MediumCVE-2026-0233
CVE-2026-0233 Autonomous Digital Experience Manager: Improper validation of ADEM certificate
- Apr 8, 2026PAN-SA-2026-0004MediumCVE-2025-12428, CVE-2025-12429 +20
PAN-SA-2026-0004 Chromium: Monthly Vulnerability Update (April 2026)
- Apr 8, 2026CVE-2026-0234HighCVE-2026-0234
CVE-2026-0234 Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration
- Mar 11, 2026CVE-2026-0231MediumCVE-2026-0231
CVE-2026-0231 Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability
- Mar 11, 2026CVE-2026-0230MediumCVE-2026-0230
CVE-2026-0230 Cortex XDR Agent: Local Administrator can disable the agent on macOS
- Mar 11, 2026PAN-SA-2026-0003MediumCVE-2025-12428, CVE-2025-12429 +20
PAN-SA-2026-0003 Chromium: Monthly Vulnerability Update (March 2026)
- Feb 11, 2026CVE-2026-0228LowCVE-2026-0228
CVE-2026-0228 PAN-OS: Improper Validation of Terminal Server Agent Certificate
- Feb 11, 2026CVE-2026-0229MediumCVE-2026-0229
CVE-2026-0229 PAN-OS: Denial of Service in Advanced DNS Security Feature
- Feb 11, 2026PAN-SA-2026-0002HighCVE-2025-12428, CVE-2025-12429 +20
PAN-SA-2026-0002 Chromium: Monthly Vulnerability Update (February 2026)
- Jan 14, 2026CVE-2026-0227HighCVE-2026-0227
CVE-2026-0227 PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal
- Jan 14, 2026PAN-SA-2026-0001MediumCVE-2025-12428, CVE-2025-12429 +20
PAN-SA-2026-0001 Chromium: Monthly Vulnerability Update (January 2026)
- Nov 12, 2025CVE-2025-4619MediumCVE-2025-4619
CVE-2025-4619 PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Packets
- Nov 12, 2025PAN-SA-2025-0018MediumCVE-2025-12428, CVE-2025-12429 +20
PAN-SA-2025-0018 Chromium and Prisma Browser: Monthly Vulnerability Update (November 2025)
- Nov 2, 2025PAN-SA-2025-0017Disclosed before NVD
PAN-SA-2025-0017 Informational Bulletin: Impact of OSS CVEs in Prisma SD-WAN ION
- Oct 8, 2025CVE-2025-4614LowCVE-2025-4614
CVE-2025-4614 PAN-OS: Session Token Disclosure Vulnerability
- Oct 8, 2025CVE-2025-4615MediumCVE-2025-4615
CVE-2025-4615 PAN-OS: Improper Neutralization of Input in the Management Web Interface
- Oct 8, 2025PAN-SA-2025-0016MediumCVE-2025-10200, CVE-2025-10201 +13
PAN-SA-2025-0016 Chromium: Monthly Vulnerability Update (October 2025)
- Sep 10, 2025CVE-2025-4234LowCVE-2025-4234
CVE-2025-4234 Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials
- Sep 10, 2025CVE-2025-4235MediumCVE-2025-4235
CVE-2025-4235 User-ID Credential Agent: Cleartext Exposure of Service Account password
- Sep 10, 2025PAN-SA-2025-0015MediumCVE-2025-4233, CVE-2025-4664 +10
PAN-SA-2025-0015 Chromium: Monthly Vulnerability Update (September 2025)
- Aug 13, 2025CVE-2025-2184MediumCVE-2025-2184
CVE-2025-2184 Cortex XDR Broker VM: Secrets Shared Across Multiple Broker VM Images
- Aug 13, 2025CVE-2025-2183MediumCVE-2025-2183
CVE-2025-2183 GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation
- Aug 13, 2025CVE-2025-2182LowCVE-2025-2182
CVE-2025-2182 PAN-OS: Firewall Clusters using the MACsec Protocol Expose the Connectivity Association Key (CAK)
- Aug 13, 2025CVE-2025-2181LowCVE-2025-2181
CVE-2025-2181 Checkov by Prisma Cloud: Cleartext Exposure of Credentials
- Aug 13, 2025CVE-2025-2180LowCVE-2025-2180
CVE-2025-2180 Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution
- Aug 13, 2025PAN-SA-2025-0014MediumCVE-2025-4233, CVE-2025-4664 +10
PAN-SA-2025-0014 Chromium: Monthly Vulnerability Update (August 2025)