PA
Network Security
PAN-OS
On CISA KEVExploited in the wildRansomware-linked
306
CVEs
17
On KEV
10.0
Max CVSS
9
New 30D
Severity mix
Critical 28High 121Medium 117Low 19
Watch
Add PAN-OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-0028 In wildKEV | 8.6 | Aug 10 | PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering Affected: 8.1 before 8.1.23-h1; 9.0 before 9.0.16-h3; 9.1 before 9.1.14-h4; 10.0 before 10.0.11-h1; 10.1 before 10.1.6-h6; 10.2 before 10.2.2-h2 |
| CVE-2026-109619 In wildKEV | 8.1 | Oct 21 | RCE via stale global state Affected: 10.2.0 before 10.2.7; 10.2.7; 10.2.7; 10.2.7; 10.2.7; 10.2.7; +34 more |
| CVE-2019-1579 RansomwareIn wildKEV | 8.1 | Jul 19 | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability Affected: before 7.1.19; 8.0.0 before 8.0.12; 8.1.0 before 8.1.3 |
| CVE-2018-14634 In wildKEV | 7.8 | Sep 25 | Linux Kernel Integer Overflow Vulnerability Affected: 7.1.0 before 7.1.23; 8.0.0 before 8.0.16; 8.1.0 before 8.1.7 |
| CVE-2024-3393 In wildKEV | 7.5 | Dec 27 | PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet Affected: 11.2.0 before 11.2.3; 11.1.0 before 11.1.2-h16; 10.2.8 before 10.2.8-h19; 10.1.14 before 10.1.14-h8; 11.2.0 before 11.2.3 |
| CVE-2026-0322 In wildKEV | 7.2 | Oct 14 | PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface Affected: 12.2.0 before 12.2.4; 12.1.0 before 12.1.10-h2; 11.2.0 before 11.2.16; 11.1.0 before 11.1.16-h3; 10.2.0 before 10.2.18-h12 |
| CVE-2024-9474 RansomwareIn wildKEV | 7.2 | Nov 18 | PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface Affected: 11.2.0 before 11.2.4-h1; 11.1.0 before 11.1.5-h1; 11.0.0 before 11.0.6-h1; 10.2.0 before 10.2.12-h2; 10.1.0 before 10.1.14-h6 |
| CVE-2016-5195 In wildKEV | 7.0 | Nov 10 | Linux Kernel Race Condition Vulnerability Affected: 5.1 before 7.0.14; 7.1.0 before 7.1.8 |
| CVE-2026-0259 | 8.8 | May 13 | WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B) Affected: before 10.2.7; 10.2.8 before 10.2.10; 10.2.11 before 10.2.13; 10.2.14 before 10.2.16; 10.2.7; 10.2.7; +34 more |
| CVE-2025-4232 | 8.8 | Jun 12 | GlobalProtect: Authenticated Code Injection Through Wildcard on macOS Affected: 6.0.0 before 6.2.8; 6.3.0 before 6.3.3 |
| CVE-2024-5921 | 8.8 | Nov 27 | GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation Affected: 6.1.0 before 6.1.6; 6.1.0 before 6.1.7; 6.1.0 before 6.2.1; 6.1.0 before 6.2.6; 6.1.0 before 6.2.6; 6.3.0 before 6.3.2; +1 more |
| CVE-2024-0008 | 8.8 | Feb 14 | PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface Affected: 9.0 before 9.0.17-h2; 9.0 before 9.0.18; 9.1 before 9.1.17; 10.0 before 10.0.12-h1; 10.0 before 10.0.13; 10.1 before 10.1.10-h1; +3 more |
| CVE-2021-3062 | 8.8 | Nov 10 | PAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect Users Affected: 9.1 before 9.1.11; 8.1 before 8.1.20; 9.0 before 9.0.14; 10.0 before 10.0.8 |
| CVE-2021-3056 | 8.8 | Nov 10 | PAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML Authentication Affected: 9.0 before 9.0.14; 8.1 before 8.1.20; 9.1 before 9.1.9; 10.0 before 10.0.1 |
| CVE-2021-3050 | 8.8 | Aug 11 | PAN-OS: OS Command Injection Vulnerability in Web Interface Affected: 9.0.10 before 9.0*; 9.1.4 before 9.1*; 10.0.0 before 10.0*; 10.1.0 before 10.1* |
| CVE-2020-2036 | 8.8 | Sep 9 | PAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interface Affected: 9.0 before 9.0.9; 8.1 before 8.1.16 |
| CVE-2020-2015 | 8.8 | May 13 | PAN-OS: Buffer overflow in the management server Affected: 8.0.*; 9.0 before 9.0.7; 7.1 before 7.1.26; 8.1 before 8.1.13; 9.1 before 9.1.1 |
| CVE-2020-2014 | 8.8 | May 13 | PAN-OS: OS injection vulnerability in PAN-OS management server Affected: 8.0.*; 7.1.*; 8.1 before 8.1.14; 9.0 before 9.0.7 |
| CVE-2020-2013 | 8.8 | May 13 | PAN-OS: Panorama context switch session cookie disclosure Affected: 8.0.*; 9.0 before 9.0.6; 7.1 before 7.1.26; 8.1 before 8.1.13; 9.1 before 9.1.1 |
| CVE-2020-2006 | 8.8 | May 13 | PAN-OS: Buffer overflow in management server payload parser Affected: 7.1.*; 8.0.*; 8.1 before 8.1.14 |
| CVE-2020-1998 | 8.8 | May 13 | PAN-OS: Improper SAML SSO authorization of shared local users Affected: 8.0.*; 8.1 before 8.1.13; 7.1 before 7.1.26; 9.0 before 9.0.6; 9.1 before 9.1.1 |
| CVE-2020-1975 | 8.8 | Feb 12 | Missing XML Validation in PAN-OS Web Interface Affected: 8.1 before 8.1.12; 9.0 before 9.0.6 |
| CVE-2019-1575 | 8.8 | Jul 16 | Information disclosure in PAN-OS 7.1.23 and earlier, PAN-OS 8.0.18 and earlier, PAN-OS 8.1.8-h4 and earlier, and PAN-OS 9.0.2 and earlier may allow for an authenticated user with… Affected: PAN-OS 7.1.23 and earlier; PAN-OS 8.0.18 and earlier; PAN-OS 8.1.8-h4 and earlier; and PAN-OS 9.0.2-h3 |
| CVE-2019-1576 | 8.8 | Jul 16 | Command injection in PAN-0S 9.0.2 and earlier may allow an authenticated attacker to gain access to a remote shell in PAN-OS, and potentially run with the escalated user’s… Affected: PAN-0S 9.0.2 and earlier |
| CVE-2016-4971 | 8.8 | Jun 30 | GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource Affected: 6.1.0 through 6.1.16; 7.0.0 through 7.0.14; 7.1.0 through 7.1.9 |
| CVE-2025-0128 | 8.7 | Apr 11 | PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet Affected: 11.2.0 before 11.2.3; 11.1.0 before 11.1.5; 11.0.0 before 11.0.6; 10.2.0 before 10.2.10-h17; 10.1.0 before 10.1.14-h11 |
| CVE-2024-9472 | 8.7 | Nov 14 | PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Traffic Affected: 11.2.2 before 11.2.2-h3; 11.1.2-h9 before 11.1.2-h14; 10.2.7-h12 before 10.2.7-h16 |
| CVE-2025-4230 | 8.4 | Jun 12 | PAN-OS: Authenticated Admin Command Injection Vulnerability Through CLI Affected: 11.2.0 before 11.2.6; 11.1.0 before 11.1.10; 10.2.0 before 10.2.14; 10.1.0 before 10.1.14-h15 |
| CVE-2025-0126 | 8.3 | Apr 11 | PAN-OS: Session Fixation Vulnerability in GlobalProtect SAML Login Affected: 11.2.0 before 11.2.3; 11.1.0 before 11.1.5; 11.0.0 before 11.0.6; 10.2.0 before 10.2.10-h6; 10.1.0 before 10.1.14-h11 |
| CVE-2020-2050 | 8.2 | Nov 12 | PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verification Affected: 8.1 before 8.1.17; 9.0 before 9.0.11; 9.1 before 9.1.5; 10.0 before 10.0.1 |
| CVE-2026-0298 | 8.1 | Aug 13 | GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) Affected: 6.0.0 before 6.0.15; 6.2.0 before 6.2.8; 6.3.0 before 6.3.3; 6.0.15; 6.2.8; 6.2.8; +21 more |
| CVE-2026-0297 | 8.1 | Aug 13 | GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake Affected: 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; +34 more |
| CVE-2026-0250 | 8.1 | May 13 | GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway Affected: 6.0.0 before 6.0.12; 6.0.0 before 6.0.13; 6.0.0 before 6.0.13; 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.1.0 before 6.1.14; +32 more |
| CVE-2026-0265 | 8.1 | May 13 | PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled Affected: 12.1.0 before 12.1.7, 12.1.4-h5; 11.2.0 before 11.2.12, 11.2.10-h6, 11.2.7-h13, 11.2.4-h17; 11.1.0 before 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33; 10.2.0 before 10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34 |
| CVE-2022-0030 | 8.1 | Oct 12 | PAN-OS: Authentication Bypass in Web Interface Affected: 8.1 before 8.1.24 |
| CVE-2021-3060 | 8.1 | Nov 10 | PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP) Affected: 8.1 before 8.1.20-h1; 9.0 before 9.0.14-h3; 9.1 before 9.1.11-h2; 10.0 before 10.0.8; 10.1 before 10.1.3 |
| CVE-2021-3059 | 8.1 | Nov 10 | PAN-OS: OS Command Injection Vulnerability When Performing Dynamic Updates Affected: 10.0 before 10.0.8; 10.1 before 10.1.3; 8.1 before 8.1.20-h1; 9.0 before 9.0.14-h3; 9.1 before 9.1.11-h2 |
| CVE-2021-3057 | 8.1 | Oct 13 | GlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or Gateway Affected: 5.0 through 5.0.8; 5.0 through 5.0.9; 5.0 through 5.0.10; 5.1 through 5.1.1; 5.1 through 5.1.1; 5.1 before 5.1.9; +7 more |
| CVE-2020-2034 | 8.1 | Jul 8 | PAN-OS: OS command injection vulnerability in GlobalProtect portal Affected: 8.0.*; 7.1.*; 9.1 before 9.1.3; 9.0 before 9.0.9; 8.1 before 8.1.15 |
| CVE-2020-2002 | 8.1 | May 13 | PAN-OS: Spoofed Kerberos key distribution center authentication bypass Affected: 8.0.*; 8.1 before 8.1.13; 9.0 before 9.0.6; 7.1 before 7.1.26 |
| CVE-2025-0118 | 8.0 | Mar 12 | GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability Affected: 6.0.0 before 6.0.11; 6.1.0 before 6.1.6; 6.2.0 before 6.2.5; 6.3.0 before 6.3.3 |
| CVE-2026-0299 | 7.8 | Aug 13 | GlobalProtect App: Local Privilege Escalation Vulnerabilities Affected: 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.2.0 before 6.2.8; 6.2.0 before 6.2.8; 6.3.0 before 6.3.3; +34 more |
| CVE-2026-0251 | 7.8 | May 13 | GlobalProtect App: Local Privilege Escalation Vulnerabilities Affected: 6.0.0 before 6.0.11; 6.0.0 before 6.0.13; 6.0.0 before 6.0.13; 6.2.0 before 6.2.8; 6.2.0 before 6.2.8; 6.3.0 before 6.3.3; +27 more |
| CVE-2024-9473 | 7.8 | Oct 9 | GlobalProtect App: Local Privilege Escalation (PE) Vulnerability Affected: 5.1 before 6.2.5; 6.3.0; 6.3.1 |
| CVE-2024-5915 | 7.8 | Aug 14 | GlobalProtect App: Local Privilege Escalation (PE) Vulnerability Affected: 5.1.0 through 5.1.9; 6.0.0 through 6.0.6; 6.1.0 before 6.1.5; 6.2.0 before 6.2.4; 6.3.0 |
| CVE-2023-0009 | 7.8 | Jun 14 | GlobalProtect App: Local Privilege Escalation (PE) Vulnerability Affected: before 5.2.13; 6.0.0 before 6.0.5; 6.1.0 |
| CVE-2022-0017 | 7.8 | Feb 10 | GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation Affected: 5.1 before 5.1.10; 5.2 before 5.2.5 |
| CVE-2022-0016 | 7.8 | Feb 10 | GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon Affected: 5.2 before 5.2.9 |
| CVE-2020-1989 | 7.8 | Apr 8 | Global Protect Agent: Incorrect privilege assignment allows local privilege escalation Affected: 5.0 before 5.0.8; 5.1 before 5.1.1 |
| CVE-2020-1979 | 7.8 | Mar 11 | PAN-OS: A format string vulnerability in PAN-OS log daemon (logd) on Panorama allows local privilege escalation Affected: 8.1 before 8.1.13 |