Login Request a demo
PA
Vendor
Paloaltonetworks
39 products with CVEs on record
120
CVEs
4
On KEV
2
New 30D
Products
PV
Panorama Virtual Appliance
Paloaltonetworks
9.8
2 CVEs2 on KEV2 new
PA
Prisma Access
Paloaltonetworks
9.1
9 CVEs2 on KEV0 new
CX
Cortex XDR Agent
Palo Alto Networks
7.8
22 CVEs0 on KEV0 new
CX
Cortex XSOAR
Palo Alto Networks
9.8
12 CVEs0 on KEV0 new
PA
Prisma Access Agent
Paloaltonetworks
7.8
12 CVEs0 on KEV0 new
PB
Prisma Browser
Paloaltonetworks
7.8
6 CVEs0 on KEV0 new
GA
GlobalProtect App
Palo Alto Networks
8.0
5 CVEs0 on KEV0 new
PC
Prisma Cloud
Paloaltonetworks
9.8
4 CVEs0 on KEV0 new
CN
Cloud Ngfw
Paloaltonetworks
7.5
3 CVEs0 on KEV0 new
CX
Cortex XDR Broker VM
Palo Alto Networks
7.8
3 CVEs0 on KEV0 new
EM
Expedition Migration Tool
Paloaltonetworks
8.8
3 CVEs0 on KEV0 new
IE
Idira Endpoint Privilege Manager
Paloaltonetworks
7.8
3 CVEs0 on KEV0 new
SE
Secdo
Paloaltonetworks
7.8
3 CVEs0 on KEV0 new
TS
Terminal Services Agent
Paloaltonetworks
7.8
3 CVEs0 on KEV0 new
TR
Traps
Paloaltonetworks
7.5
3 CVEs0 on KEV0 new
BC
Bridgecrew Checkov
Paloaltonetworks
7.2
2 CVEs0 on KEV0 new
PS
Prisma Sd-wan
Paloaltonetworks
8.1
2 CVEs0 on KEV0 new
TP
Trust Protection Foundation
Paloaltonetworks
8.7
2 CVEs0 on KEV0 new
AD
Autonomous Digital Experience Manager
Paloaltonetworks
8.8
1 CVEs0 on KEV0 new
BV
Broker VM
Paloaltonetworks
3.2
1 CVEs0 on KEV0 new
CC
Chronosphere Collector
Paloaltonetworks
6.5
1 CVEs0 on KEV0 new
CX
Cortex Xsiam
Paloaltonetworks
9.1
1 CVEs0 on KEV0 new
CX
Cortex Xsiam Commvaultsecurityiq Marketplace
Paloaltonetworks
9.1
1 CVEs0 on KEV0 new
CX
Cortex Xsoar Commonscripts
Paloaltonetworks
9.8
1 CVEs0 on KEV0 new
CX
Cortex Xsoar Commvaultsecurityiq Marketplace
Paloaltonetworks
9.1
1 CVEs0 on KEV0 new
DE
Demisto
Paloaltonetworks
6.1
1 CVEs0 on KEV0 new
II
Idira Identity Browser Extension
Paloaltonetworks
6.5
1 CVEs0 on KEV0 new
IP
Idira Privilege Cloud Connector
Paloaltonetworks
8.8
1 CVEs0 on KEV0 new
IP
Idira Privileged Access Manager Vault
Paloaltonetworks
8.6
1 CVEs0 on KEV0 new
IP
Idira Privileged Session Manager
Paloaltonetworks
8.8
1 CVEs0 on KEV0 new
IP
Idira Privileged Session Manager For Ssh
Paloaltonetworks
8.8
1 CVEs0 on KEV0 new
IS
Idira Secrets Manager
Paloaltonetworks
8.1
1 CVEs0 on KEV0 new
IS
Idira Secrets Manager Credential Providers
Paloaltonetworks
8.1
1 CVEs0 on KEV0 new
IS
Idira Secrets Manager Edge
Paloaltonetworks
9.1
1 CVEs0 on KEV0 new
MI
Minemeld
Paloaltonetworks
6.1
1 CVEs0 on KEV0 new
NE
Netconnect
Paloaltonetworks
–
1 CVEs0 on KEV0 new
PC
Prisma Cloud Compute Edition
Palo Alto Networks
2.0
1 CVEs0 on KEV0 new
TW
Twistlock
Paloaltonetworks
8.0
1 CVEs0 on KEV0 new
VM
Vm-series
Paloaltonetworks
4.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-109619
In wildKEV
PV
Panorama Virtual Appliance
Paloaltonetworks
8.1
100%
Oct 21RCE via stale global state
CVE-2026-109618
In wildKEV
PV
Panorama Virtual Appliance
Paloaltonetworks
9.8
100%
Oct 21RCE via OOM corruption
CVE-2026-0301
CN
Cloud Ngfw
Paloaltonetworks
7.5
1%
Aug 13PAN-OS: Information Disclosure Vulnerability in URL Filtering
CVE-2026-0294
PA
Prisma Access Agent
Paloaltonetworks
7.8
0%
Aug 13Prisma Access Agent: Local Privilege Escalation
CVE-2026-0293
PA
Prisma Access Agent
Paloaltonetworks
6.0
0%
Aug 13Prisma Access Agent: Anti-Tamper Protection Bypass on Windows
CVE-2026-0292
PA
Prisma Access Agent
Paloaltonetworks
6.0
0%
Aug 13Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows
CVE-2026-0291
PA
Prisma Access Agent
Paloaltonetworks
4.4
0%
Aug 13Prisma Access Agent: Authenticated Limited File Deletion on Linux
CVE-2026-0290
PB
Prisma Browser
Paloaltonetworks
5.5
0%
Aug 13Prisma Browser: Sensitive Information Disclosure Vulnerability
CVE-2026-0289
PB
Prisma Browser
Paloaltonetworks
6.5
0%
Aug 13Prisma Browser: Inappropriate Implementation in Account Protection
CVE-2026-0275
PB
Prisma Browser
Paloaltonetworks
6.7
0%
Jul 9Prisma Browser: Local Privilege Escalation on macOS
CVE-2026-0276
CX
Cortex Xdr Broker VM
Paloaltonetworks
7.8
0%
Jul 9Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability
CVE-2026-0277
PA
Prisma Access Agent
Paloaltonetworks
5.9
0%
Jul 9Prisma Access Agent: Improper Certificate Validation on iOS
CVE-2026-0278
PA
Prisma Access Agent
Paloaltonetworks
7.8
0%
Jul 9Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows
CVE-2026-0287
CN
Cloud Ngfw
Paloaltonetworks
7.5
1%
Jul 9PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing
CVE-2026-45169
IP
Idira Privileged Access Manager Vault
Paloaltonetworks
8.6
0%
Jun 12Idira Privileged Access Manager (PAM) Self-Hosted Vault: Denial of Service due to Unexpected Input Processing
CVE-2026-45170
IP
Idira Privilege Cloud Connector
Paloaltonetworks
8.8
0%
Jun 12Idira Vendor PAM - Self-Hosted Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation
CVE-2026-45171
IP
Idira Privileged Session Manager
Paloaltonetworks
8.8
1%
Jun 11Idira Privileged Session Manager (PSM): Potential Code Execution due to an Incomplete Input Validation
CVE-2026-45172
IP
Idira Privileged Session Manager For Ssh
Paloaltonetworks
8.8
1%
Jun 11Idira Privileged Session Manager for SSH (PSMP): Arbitrary Command Execution via Improper Neutralization of Special Elements used in an OS Command
CVE-2026-45173
II
Idira Identity Browser Extension
Paloaltonetworks
6.5
0%
Jun 11Idira Identity Browser Extension: Unauthorized Application Interaction via Origin Validation Failure
CVE-2026-45174
IE
Idira Endpoint Privilege Manager
Paloaltonetworks
7.8
0%
Jun 11Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon Initialization
CVE-2026-45175
IE
Idira Endpoint Privilege Manager
Paloaltonetworks
7.8
0%
Jun 11Idira Endpoint Privilege Manager Agent: Security Control and Cryptographic Validation Bypass in Internal Agent Validation Processes
CVE-2026-45176
IE
Idira Endpoint Privilege Manager
Paloaltonetworks
7.8
0%
Jun 11Idira Endpoint Privilege Manager Agent: Local Privilege Escalation via Internal Communication or File Operation Manipulation
CVE-2026-45177
IS
Idira Secrets Manager Edge
Paloaltonetworks
9.1
1%
Jun 11Idira Secrets Manager SaaS Edge: Authentication Bypass of an internal validation mechanism
CVE-2026-45178
IS
Idira Secrets Manager Credential Providers
Paloaltonetworks
8.1
0%
Jun 11Idira Secrets Manager Self-Hosted: Improper Access Control in Internal Cluster Endpoints
CVE-2026-0274
CX
Cortex Xsoar Commvaultsecurityiq Marketplace
Paloaltonetworks
9.1
0%
Jun 10Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration
CVE-2026-0271
PA
Prisma Access Agent
Paloaltonetworks
7.8
0%
Jun 10Prisma Access Agent: Local Privilege Escalation by Authorized Users
CVE-2026-0270
CX
Cortex Xsoar
Paloaltonetworks
7.5
0%
Jun 10Cortex XSOAR: Path Traversal Vulnerability
CVE-2026-0268
PA
Prisma Access Agent
Paloaltonetworks
4.4
0%
Jun 10Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux
CVE-2026-0243
PS
Prisma Sd-wan
Paloaltonetworks
6.5
0%
May 13Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet
CVE-2026-0248
PA
Prisma Access Agent
Paloaltonetworks
5.9
0%
May 13Prisma Access Agent: Improper Certificate Validation Vulnerability
CVE-2026-0244
PS
Prisma Sd-wan
Paloaltonetworks
8.1
0%
May 13Prisma SD-WAN: Improper Certificate Validation Vulnerability
CVE-2026-0241
TP
Trust Protection Foundation
Paloaltonetworks
7.2
0%
May 13Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities
CVE-2026-0245
PA
Prisma Access Agent
Paloaltonetworks
5.5
0%
May 13Prisma Access Agent: Information Disclosure Vulnerabilities
CVE-2026-0240
TP
Trust Protection Foundation
Paloaltonetworks
8.7
0%
May 13Trust Protection Foundation: Sensitive Information Disclosure Vulnerability
CVE-2026-0246
PA
Prisma Access Agent
Paloaltonetworks
7.8
0%
May 13Prisma Access Agent: Local Privilege Escalation Vulnerability
CVE-2026-0247
PA
Prisma Access Agent
Paloaltonetworks
7.8
0%
May 13Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities
CVE-2026-0239
CC
Chronosphere Collector
Paloaltonetworks
6.5
0%
May 13Chronosphere Chronocollector Information Disclosure Vulnerability
CVE-2026-0238
BV
Broker VM
Paloaltonetworks
3.2
0%
May 13Broker VM: Improper Input Validation in Broker VM Certificate and Key Fields
CVE-2026-0257
RansomwareIn wildKEV
PA
Prisma Access
Paloaltonetworks
9.1
95%
May 13PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
CVE-2026-0235
PB
Prisma Browser
Paloaltonetworks
4.7
0%
May 13Prisma Browser: Access and Data Rule Bypass
CVE-2026-0236
PB
Prisma Browser
Paloaltonetworks
7.8
0%
May 13Prisma Browser: Code Injection Enables Security Controls Bypass
CVE-2026-0237
PB
Prisma Browser
Paloaltonetworks
7.8
0%
May 13Prisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass
CVE-2026-0232
CX
Cortex Xdr Agent
Paloaltonetworks
4.4
0%
Apr 13Cortex XDR Agent: Local Administrator can disable the agent on Windows
CVE-2026-0233
AD
Autonomous Digital Experience Manager
Paloaltonetworks
8.8
0%
Apr 13Autonomous Digital Experience Manager: Improper validation of ADEM certificate
CVE-2026-0234
CX
Cortex Xsoar
Paloaltonetworks
9.1
0%
Apr 13Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration
CVE-2026-0227
PA
Prisma Access
Paloaltonetworks
7.5
1%
Jan 15PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal
CVE-2025-0138
PC
Prisma Cloud Compute Edition
Palo Alto Networks
2.0
0%
May 14Prisma Cloud Compute Edition: Insufficient Session Expiration Vulnerability in the Web Interface
CVE-2025-0135
GA
GlobalProtect App
Palo Alto Networks
3.3
0%
May 14GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App
CVE-2025-0134
CX
Cortex XDR Broker VM
Palo Alto Networks
6.5
1%
May 14Cortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VM
CVE-2025-0132
CX
Cortex XDR Broker VM
Palo Alto Networks
6.9
0%
May 14Cortex XDR Broker VM: Unauthenticated User Can Disable Internal Services
CVE-2025-0121
CX
Cortex XDR Agent
Palo Alto Networks
6.8
0%
Apr 11Cortex XDR Agent: Local Windows User Can Crash the Agent
CVE-2025-0120
GA
GlobalProtect App
Palo Alto Networks
7.0
0%
Apr 11GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
CVE-2025-0118
GA
GlobalProtect App
Palo Alto Networks
8.0
0%
Mar 12GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability
CVE-2025-0117
GA
GlobalProtect App
Palo Alto Networks
7.1
0%
Mar 12GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
CVE-2025-0112
CX
Cortex XDR Agent
Palo Alto Networks
6.8
0%
Feb 19Cortex XDR Agent: Local Windows User Can Disable the Agent
CVE-2024-3393
In wildKEV
PA
Prisma Access
Paloaltonetworks
7.5
29%
Dec 27PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet
CVE-2024-5917
CN
Cloud Ngfw
Paloaltonetworks
4.9
0%
Nov 14PAN-OS: Server-Side Request Forgery in WildFire
CVE-2024-9473
GA
GlobalProtect App
Palo Alto Networks
7.8
0%
Oct 9GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
CVE-2024-9470
CX
Cortex XSOAR
Palo Alto Networks
5.3
0%
Oct 9Cortex XSOAR: Information Disclosure Vulnerability
CVE-2024-9469
CX
Cortex XDR Agent
Palo Alto Networks
5.5
0%
Oct 9Cortex XDR Agent: Local Windows User Can Disable the Agent