CVE Program partner

palo_alto

Palo Alto Networks, Inc.

API
CVEs, 365 days110498 all time, 60 rejected
Quality99%median 99%
CVSS by the CNA100%share of records
CWE99%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationPalo Alto Networks, Inc.
RoleCNA
TypeVendor, Researcher
Reports tomitre
ScopeAll Palo Alto Networks products, and vulnerabilities discovered by Palo Alto Networks that are not in another CNA’s scope.
Advisorieshttps://securityadvisories.paloaltonetworks.com/

Latest CVEs · RSS

  • CVE-2026-45165 2026-10-15 · CVSS 8.6
    An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Un
  • CVE-2026-0311 2026-10-14 · CVSS 1.1
    A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network req
  • CVE-2026-0312 2026-10-14 · CVSS 4.3
    Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the
  • CVE-2026-0313 2026-10-14 · CVSS 6.1
    A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute ar
  • CVE-2026-0314 2026-10-14 · CVSS 4.3
    A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) c
  • CVE-2026-0315 2026-10-14 · CVSS 5.9
    A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This
  • CVE-2026-0316 2026-10-14 · CVSS 1.1
    A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a J
  • CVE-2026-0317 2026-10-14 · CVSS 1.2
    A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of s
  • CVE-2026-0318 2026-10-14 · CVSS 4.6
    A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause
  • CVE-2026-0319 2026-10-14 · CVSS 4.9
    An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a Global
  • CVE-2026-0320 2026-10-14 · CVSS 6.1
    A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary
  • CVE-2026-0321 2026-10-14 · CVSS 6.6
    Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS
  • CVE-2026-0322 2026-10-14 · CVSS 8.6
    A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network ac
  • CVE-2026-103548 2026-09-30 · CVSS 5.3
    Improperly stored passwords in the config file in Itron MV-90 xi 3.0 allows attackers to decode the passwords and password histories to gain access to the MV-90
  • CVE-2026-0302 2026-09-10 · CVSS 1.1
    An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running
  • CVE-2026-0303 2026-09-10 · CVSS 2.4
    A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an
  • CVE-2026-0304 2026-09-10 · CVSS 4.8
    A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM) acces
  • CVE-2026-0305 2026-09-10 · CVSS 4.3
    An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and
  • CVE-2026-0306 2026-09-10 · CVSS 5.8
    A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP
  • CVE-2026-0307 2026-09-10 · CVSS 5.9
    Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORIT
  • CVE-2026-0308 2026-09-10 · CVSS 1.1
    A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a J
  • CVE-2026-0309 2026-09-10 · CVSS 4.0
    A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary
  • CVE-2026-0310 2026-09-10 · CVSS 7.2
    A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network acce
  • CVE-2026-0301 2026-08-13 · CVSS 1.7
    An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access
  • CVE-2026-0299 2026-08-13 · CVSS 5.9
    Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM

All CVE Program partners