PA
Product
Prisma Access
On CISA KEVExploited in the wildRansomware-linked
18
CVEs
1
On KEV
9.1
Max CVSS
2
New 30D
Severity mix
Critical 1High 10Medium 4Low 3
Watch
Add Prisma Access to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-0257 RansomwareIn wildKEV | 9.1 | May 13 | PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities Affected: 10.2.0 before 10.2.10-h36; 11.2.0 before 11.2.7-h13 |
| CVE-2025-0128 | 8.7 | Apr 11 | PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet Affected: 10.2.0 before 10.2.4-h36; 11.2.0 before 11.2.4-h5 |
| CVE-2025-0126 | 8.3 | Apr 11 | PAN-OS: Session Fixation Vulnerability in GlobalProtect SAML Login Affected: 10.2.0 before 10.2.4-h36; 11.2.0 before 11.2.4-h5 |
| CVE-2026-0301 | 7.5 | Aug 13 | PAN-OS: Information Disclosure Vulnerability in URL Filtering Affected: 10.2.0 before 10.2.10 |
| CVE-2026-0287 | 7.5 | Jul 9 | PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing Affected: 11.2.0 before 11.2.7-h18; 10.2.0 before 10.2.10-h39 |
| CVE-2026-0288 | 7.5 | Jul 8 | PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent Affected: 11.2.0 before 11.2.7-h18; 10.2.0 before 10.2.10-h39 |
| CVE-2026-0262 | 7.5 | May 13 | PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing Affected: 10.2.0 before 10.2.10-h36; 11.2.0 before 11.2.7-h13 |
| CVE-2026-0227 | 7.5 | Jan 15 | PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal Affected: 11.2 before 11.2.7-h8; 10.2 before 10.2.10-h29, 10.2.4-h43 |
| CVE-2026-0310 | 7.2 | Sep 10 | PAN-OS: Buffer Overflow Vulnerability via XML Processing Affected: 11.2.0 before 11.2.4-h21; 10.2.0 before 10.2.7-h37 |
| CVE-2026-0280 | 7.2 | Jul 9 | PAN-OS: IPv6 Firewall Policy Bypass Affected: 11.2.0 before 11.2.7-h18; 10.2.0 before 10.2.10-h39 |
| CVE-2024-8687 | 7.1 | Sep 11 | PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes Affected: 10.2.0 before 10.2.9 on PAN-OS |
| CVE-2026-0321 | 6.6 | Oct 14 | PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services Affected: 12.1.0 before 12.1.7-h8; 11.2.0 before 11.2.7-h21; 10.2.0 before 10.2.10-h41 |
| CVE-2025-4619 | 6.6 | Nov 13 | PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Packets Affected: 10.2.0 before 10.2.10-h14 |
| CVE-2026-0279 | 6.1 | Jul 9 | PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities Affected: 12.1.0 before 12.1.8; 11.2.0; 10.2.0 |
| CVE-2026-0319 | 4.9 | Oct 14 | PAN-OS: Improper Input Handling Vulnerability Affected: 12.1.0 before 12.1.7-h8; 11.2.0 before 11.2.7-h21; 10.2.0 before 10.2.10-h41 |
| CVE-2025-0133 | 2.7 | May 14 | PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal Affected: All versions, or not specified |
| CVE-2026-0228 | 1.3 | Feb 11 | PAN-OS: Improper Validation of Terminal Server Agent Certificate Affected: 10.2.0 before 10.2.10-h28 |
| CVE-2026-0308 | 1.1 | Sep 10 | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface Affected: All versions, or not specified |
Showing 18