Palo Alto Networks PAN-OS

14 known vulnerabilities in Palo Alto Networks PAN-OS, 4 critical, 10 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2026-0257 CVSS 7.8 high · actively exploited Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
  • CVE-2026-0300 CVSS 9.3 critical · actively exploited Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
  • CVE-2025-0111 CVSS 7.1 high · actively exploited Palo Alto Networks PAN-OS File Read Vulnerability
  • CVE-2025-0108 CVSS 8.8 high · actively exploited Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
  • CVE-2024-3393 CVSS 8.7 high · actively exploited Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
  • CVE-2024-9474 CVSS 6.9 medium · actively exploited Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
  • CVE-2024-0012 CVSS 9.3 critical · actively exploited Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
  • CVE-2024-3400 CVSS 10.0 critical · actively exploited Palo Alto Networks PAN-OS Command Injection Vulnerability
  • CVE-2022-0028 CVSS 8.6 high · actively exploited Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
  • CVE-2020-2021 CVSS 10.0 critical · actively exploited Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Latest vulnerabilities

  • CVE-2026-0310 CVSS 7.2 high A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated…
  • CVE-2026-0309 CVSS 4.0 medium A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system…
  • CVE-2026-0308 CVSS 1.1 low A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator…
  • CVE-2026-0257 CVSS 7.8 high · actively exploited Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
  • CVE-2026-0265 CVSS 7.2 high An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to…
  • CVE-2026-0300 CVSS 9.3 critical · actively exploited Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
  • CVE-2025-0111 CVSS 7.1 high · actively exploited Palo Alto Networks PAN-OS File Read Vulnerability
  • CVE-2025-0108 CVSS 8.8 high · actively exploited Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
  • CVE-2024-3393 CVSS 8.7 high · actively exploited Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
  • CVE-2024-9474 CVSS 6.9 medium · actively exploited Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
  • CVE-2024-0012 CVSS 9.3 critical · actively exploited Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
  • CVE-2024-3400 CVSS 10.0 critical · actively exploited Palo Alto Networks PAN-OS Command Injection Vulnerability
  • CVE-2022-0028 CVSS 8.6 high · actively exploited Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
  • CVE-2020-2021 CVSS 10.0 critical · actively exploited Palo Alto Networks PAN-OS Authentication Bypass Vulnerability