PA
Network Security
PAN-OS
On CISA KEVExploited in the wildRansomware-linked
306
CVEs
17
On KEV
10.0
Max CVSS
9
New 30D
Severity mix
Critical 28High 121Medium 117Low 19
Watch
Add PAN-OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1980 | 7.8 | Mar 11 | PAN-OS: Shell injection vulnerability in PAN-OS CLI allows execution of shell commands Affected: 8.1 < 8.1.13; 8.1 !>= 8.1.13; 9.0 !>= 9.0.0; 7.1 !>= 7.1.0; 9.1 !>= 9.1.0 |
| CVE-2020-1981 | 7.8 | Mar 11 | PAN-OS: Predictable temporary filename vulnerability allows local privilege escalation Affected: 8.1 < 8.1.13; 8.1 !>= 8.1.13; 9.0 !>= 9.0.0; 7.1 !>= 7.1.0; 9.1 !>= 9.1.0 |
| CVE-2019-17437 | 7.8 | Dec 5 | PAN-OS: Custom-role users may escalate privileges Affected: 7.1 before 7.1.25; 8.0 before 8.0.20; 8.1 before 8.1.11; 9.0 before 9.0.5 |
| CVE-2015-6531 | 7.8 | Jun 1 | Palo Alto Networks Panorama VM Appliance with PAN-OS before 6.0.1 might allow remote attackers to execute arbitrary Python code via a crafted firmware image file Affected: through 6.0 |
| CVE-2017-7218 | 7.8 | Apr 14 | The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters Affected: through 7.1.8 |
| CVE-2016-9151 | 7.8 | Nov 19 | Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows local users to gain… Affected: 5.0.0 before 5.0.20; 5.1 before 5.1.13; 6.0.0 before 6.0.15; 6.1.0 before 6.1.15; 7.0.0 before 7.0.11; 7.1.0 before 7.1.6 |
| CVE-2016-1712 | 7.8 | Aug 2 | Palo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before 7.0.8 might allow local users to gain privileges by… Affected: 5.0.0 before 5.0.19; 5.1 before 5.1.12; 6.0.0 before 6.0.14; 6.1.0 before 6.1.12; 7.0.0 before 7.0.8 |
| CVE-2024-3661 | 7.6 | May 6 | DHCP routing options can manipulate interface-based VPN traffic Affected: All versions, or not specified |
| CVE-2026-0301 | 7.5 | Aug 13 | PAN-OS: Information Disclosure Vulnerability in URL Filtering Affected: 11.1.0 before 11.1.16-h1; 10.2.0 before 10.2.8 |
| CVE-2026-0287 | 7.5 | Jul 9 | PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing Affected: 12.1.0 before 12.1.4-h8; 11.2.0 before 11.2.4-h20; 11.1.0 before 11.1.4-h35; 10.2.0 before 10.2.7-h36 |
| CVE-2026-0288 | 7.5 | Jul 8 | PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent Affected: 12.1.0 before 12.1.8; 11.2.0 before 11.2.13; 11.1.0 before 11.1.16; 10.2.0 before 10.2.7-h36 |
| CVE-2026-0262 | 7.5 | May 13 | PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing Affected: 12.1.0 before 12.1.7, 12.1.4-h5; 11.2.0 before 11.2.12, 11.2.10-h6, 11.2.7-h13, 11.2.4-h17; 11.1.0 before 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33; 10.2.0 before 10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34 |
| CVE-2026-0227 | 7.5 | Jan 15 | PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal Affected: 12.1.2 before 12.1.4, 12.1.3-h3; 11.2.0 before 11.2.10-h2, 11.2.7-h8, 11.2.4-h15; 11.1.0 before 11.1.13, 11.1.10-h9, 11.1.6-h23, 11.1.4-h27; 10.2.0 before 10.2.18-h1, 10.2.16-h6, 10.2.13-h18, 10.2.10-h30, 10.2.7-h32; 10.1.0 before 10.1.14-h20 |
| CVE-2025-0130 | 7.5 | May 14 | PAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted Packets Affected: 11.2.0 before 11.2.5; 11.1.0 before 11.1.6-h1 |
| CVE-2025-0114 | 7.5 | Mar 12 | PAN-OS: Denial of Service (DoS) in GlobalProtect Affected: 11.0.0 before 11.0.2; 10.2.0 before 10.2.5; 10.1.0 before 10.1.14-h11 |
| CVE-2024-2550 | 7.5 | Nov 14 | PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet Affected: 11.1.0 before 11.1.5; 11.0.0 before 11.0.6; 10.2.0 before 10.2.11 |
| CVE-2024-2551 | 7.5 | Nov 14 | PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet Affected: 11.0.0 before 11.0.5; 10.2.0 before 10.2.4-h6; 10.1.0 before 10.1.14 |
| CVE-2024-9468 | 7.5 | Oct 9 | PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet Affected: 11.1.0 before 11.1.3; 11.0.0 before 11.0.4-h5; 10.2.0 before 10.2.4-h24 |
| CVE-2024-5908 | 7.5 | Jun 12 | GlobalProtect App: Encrypted Credential Exposure via Log Files Affected: 5.1 before 5.1.12; 6.0 before 6.0.8; 6.1 before 6.1.3; 6.2 before 6.2.3 |
| CVE-2024-3385 | 7.5 | Apr 10 | PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled Affected: 9.0.0 before 9.0.17-h4; 9.1.0 before 9.1.17; 10.1.0 before 10.1.12; 10.2.0 before 10.2.8; 11.0.0 before 11.0.3 |
| CVE-2024-3384 | 7.5 | Apr 10 | PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets Affected: 8.1.0 before 8.1.24; 9.0.0 before 9.0.17; 9.1.0 before 9.1.15-h1; 10.0.0 before 10.0.12 |
| CVE-2024-3382 | 7.5 | Apr 10 | PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets Affected: 10.2.0 before 10.2.7-h3; 11.0.0 before 11.0.4; 11.1.0 before 11.1.2 |
| CVE-2021-3063 | 7.5 | Nov 10 | PAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces Affected: 8.1 before 8.1.21; 9.0 before 9.0.14-h4; 10.0 before 10.0.8-h4; 10.1 before 10.1.3; 9.1 before 9.1.11-h3 |
| CVE-2021-3053 | 7.5 | Sep 8 | PAN-OS: Exceptional Condition Denial-of-Service (DoS) Affected: 8.1 before 8.1.20; 9.0 before 9.0.14; 9.1 before 9.1.9; 10.0 before 10.0.5 |
| CVE-2020-2022 | 7.5 | Nov 12 | PAN-OS: Panorama session disclosure during context switch into managed device Affected: 8.1 before 8.1.17; 9.0 before 9.0.11; 9.1 before 9.1.5 |
| CVE-2020-2041 | 7.5 | Sep 9 | PAN-OS: Management web interface denial-of-service (DoS) Affected: 8.0.*; 8.1 before 8.1.16 |
| CVE-2020-2012 | 7.5 | May 13 | PAN-OS: Panorama: XML external entity reference ('XXE') vulnerability leads the to information leak Affected: 8.0.*; 7.1.*; 8.1 before 8.1.13; 9.0 before 9.0.7 |
| CVE-2020-2011 | 7.5 | May 13 | PAN-OS: Panorama registration denial of service Affected: 7.1.*; 8.0.*; 8.1 before 8.1.14; 9.0 before 9.0.7; 9.1 before 9.1.0 |
| CVE-2019-1572 | 7.5 | Mar 26 | PAN-OS 9.0.0 may allow an unauthenticated remote user to access php files Affected: PAN-OS 9.0.0 |
| CVE-2017-15942 | 7.5 | Dec 11 | Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.13, and 8.0.x before 8.0.6 allows remote attackers to cause a denial of service via vectors related… Affected: before 6.1.19; 7.0.0 before 7.0.19; 7.1.0 before 7.1.13; 8.0.0 before 8.0.6 |
| CVE-2016-8610 | 7.5 | Nov 13 | A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection… Affected: through 6.1.17; 7.0.0 through 7.0.15; 7.1.0 through 7.1.10 |
| CVE-2016-3656 | 7.5 | Apr 12 | The GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote attackers to cause a denial… Affected: 5.0.0 before 5.0.18; 5.1 before 5.1.11; 6.0.0 before 6.0.13; 6.1.0 before 6.1.10; 7.0.0 through 7.0.5 |
| CVE-2026-0296 | 7.4 | Aug 13 | GlobalProtect App: Improper Certificate Validation Bypass Vulnerability Affected: 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.0.0 before 6.0.15; 6.2.0 before 6.2.8; 6.2.0 before 6.2.8; 6.2.0 through 6.2.9; +34 more |
| CVE-2026-0310 | 7.2 | Sep 10 | PAN-OS: Buffer Overflow Vulnerability via XML Processing Affected: 12.2.0 before 12.2.3; 12.1.0 before 12.1.4-h10; 11.2.0 before 11.2.4-h21; 11.1.0 before 11.1.4-h36; 10.2.0 before 10.2.7-h37 |
| CVE-2026-0280 | 7.2 | Jul 9 | PAN-OS: IPv6 Firewall Policy Bypass Affected: 12.1.0 before 12.1.8; 11.2.0 before 11.2.13; 11.1.0 before 11.1.16; 10.2.0 before 10.2.18-h8 |
| CVE-2026-0283 | 7.2 | Jul 9 | PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) Affected: 12.1.0 before 12.1.8; 11.2.0 before 11.2.13; 11.1.0 before 11.1.16; 10.2.0 before 10.2.18-h8 |
| CVE-2026-0286 | 7.2 | Jul 9 | PAN-OS: Authenticated Command Injection in CLI Affected: 12.1.0 before 12.1.8; 11.2.0 before 11.2.13; 11.1.0 before 11.1.16; 10.2.0 before 10.2.18-h8 |
| CVE-2026-0273 | 7.2 | Jun 10 | PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI Affected: 12.1.0 before 12.1.4-h7; 11.2.0 before 11.2.4-h18; 11.1.0 before 11.1.4-h34; 10.2.0 before 10.2.7-h35 |
| CVE-2026-0272 | 7.2 | Jun 10 | PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI) Affected: 12.1.0 before 12.1.4-h7; 11.2.0 before 11.2.4-h18; 11.1.0 before 11.1.4-h34; 10.2.0 before 10.2.7-h35 |
| CVE-2026-0261 | 7.2 | May 13 | PAN-OS: Authenticated Admin Command Injection Vulnerability Affected: 12.1.0 before 12.1.7, 12.1.4-h5; 11.2.0 before 11.2.12, 11.2.10-h6, 11.2.7-h13, 11.2.4-h17; 11.1.0 before 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33; 10.2.0 before 10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34 |
| CVE-2025-4615 | 7.2 | Oct 9 | PAN-OS: Improper Neutralization of Input in the Management Web Interface Affected: 11.2.0 before 11.2.8; 11.1.0 before 11.1.4-h27; 10.2.0 before 10.2.17 |
| CVE-2025-4231 | 7.2 | Jun 12 | PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web Interface Affected: 11.0.0 before 11.0.3; 10.2.0 before 10.2.8; 10.1.0 |
| CVE-2024-8686 | 7.2 | Sep 11 | PAN-OS: Command Injection Vulnerability Affected: 11.2.2 |
| CVE-2022-0024 | 7.2 | May 11 | PAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration Commit Affected: 9.1 before 9.1.13; 10.1 before 10.1.5; 9.0 before 9.0.16; 8.1 before 8.1.23; 10.0 before 10.0.10 |
| CVE-2021-3061 | 7.2 | Nov 10 | PAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI) Affected: 8.1 before 8.1.20-h1; 9.0 before 9.0.14-h3; 10.0 before 10.0.8; 10.1 before 10.1.3; 9.1 before 9.1.11-h2 |
| CVE-2021-3058 | 7.2 | Nov 10 | PAN-OS: OS Command Injection Vulnerability in Web Interface XML API Affected: 10.1 before 10.1.3; 9.0 before 9.0.14-h3; 8.1 before 8.1.20-h1; 9.1 before 9.1.11-h2; 10.0 before 10.0.8 |
| CVE-2020-2000 | 7.2 | Nov 12 | PAN-OS: OS command injection and memory corruption vulnerability Affected: 8.1 before 8.1.16; 9.0 before 9.0.10; 9.1 before 9.1.4; 10.0 before 10.0.1 |
| CVE-2020-2042 | 7.2 | Sep 9 | PAN-OS: Buffer overflow in the management web interface Affected: 10.0 before 10.0.1 |
| CVE-2020-2038 | 7.2 | Sep 9 | PAN-OS: OS command injection vulnerability in the management web interface Affected: 10.0 before 10.0.1; 9.0 before 9.0.10; 9.1 before 9.1.4 |
| CVE-2020-2037 | 7.2 | Sep 9 | PAN-OS: OS command injection vulnerability in the management web interface Affected: 8.1 before 8.1.16; 9.0 before 9.0.10; 9.1 before 9.1.3 |