Paloaltonetworks Security Vulnerabilities (CVEs)
Track 49 security vulnerabilities affecting Paloaltonetworks products and software. Get instant email alerts when new CVEs are discovered, automated security monitoring, and patch guidance.
An unauthenticated attacker can send specially crafted requests to Palo Alto Networks PAN-OS firewalls, causing them to crash and enter maintenance mo...
Jan 15, 2026An authenticated administrator in Palo Alto Networks PAN-OS software can view session tokens of users logged into the firewall web UI, potentially ena...
Oct 9, 2025An authenticated administrator can bypass system restrictions in Palo Alto Networks PAN-OS management web interface to execute arbitrary commands. Thi...
Oct 9, 2025An authenticated command injection vulnerability in Palo Alto Networks PAN-OS allows administrative users with management interface access to execute ...
Jun 13, 2025A privilege escalation vulnerability in Palo Alto Networks GlobalProtect app on Windows allows local non-admin users to gain SYSTEM privileges by expl...
Apr 11, 2025A vulnerability in Palo Alto Networks GlobalProtect app on Windows allows remote attackers to execute ActiveX controls as an authenticated Windows use...
Mar 12, 2025An unauthenticated attacker can cause a Denial of Service (DoS) in Palo Alto Networks PAN-OS GlobalProtect by sending specially crafted packets over t...
Mar 12, 2025An authentication bypass vulnerability in Palo Alto Networks PAN-OS software allows unauthenticated attackers with network access to the management we...
Feb 12, 2025An authenticated file read vulnerability in Palo Alto Networks PAN-OS software allows authenticated attackers with management web interface access to ...
Feb 12, 2025An SQL injection vulnerability in Palo Alto Networks Expedition allows authenticated attackers to extract sensitive database information including pas...
Jan 11, 2025A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition allows attackers to execute malicious JavaScript in authenticate...
Jan 11, 2025CVE-2025-0105 is an arbitrary file deletion vulnerability in Palo Alto Networks Expedition that allows unauthenticated attackers to delete files acces...
Jan 11, 2025An unauthenticated OS command injection vulnerability in Palo Alto Networks Expedition allows attackers to execute arbitrary commands as the www-data ...
Jan 11, 2025An unauthenticated attacker can send a malicious DNS packet through a Palo Alto Networks firewall's data plane, causing the firewall to reboot. Repeat...
Dec 27, 2024This CVE describes a privilege escalation vulnerability in Palo Alto Networks PAN-OS software where an authenticated administrator with access to the ...
Nov 18, 2024An authentication bypass vulnerability in Palo Alto Networks PAN-OS software allows unauthenticated attackers with network access to the management we...
Nov 18, 2024This XSS vulnerability in Palo Alto Networks PAN-OS allows an authenticated read-write Panorama administrator to push malicious configurations to PAN-...
Nov 14, 2024An improper certificate validation vulnerability in Palo Alto Networks PAN-OS allows an authorized user with a specially crafted client certificate to...
Nov 14, 2024An unauthenticated attacker can send a specially crafted packet to Palo Alto Networks PAN-OS GlobalProtect gateways, causing a null pointer dereferenc...
Nov 14, 2024This CVE describes a command injection vulnerability in Palo Alto Networks PAN-OS software that allows authenticated administrators to bypass system r...
Nov 14, 2024This CVE describes a command injection vulnerability in Palo Alto Networks PAN-OS software that allows authenticated administrators to bypass system r...
Sep 11, 2024This vulnerability allows authenticated administrators (including read-only admins) with CLI access to read arbitrary files on Palo Alto Networks fire...
Sep 11, 2024A vulnerability in Palo Alto Networks Cortex XDR agent on Windows allows administrators to disable the endpoint detection agent. This could enable mal...
Sep 11, 2024This vulnerability allows an authenticated GlobalProtect user to impersonate another GlobalProtect user, disconnecting the legitimate user while hidin...
Sep 11, 2024CVE-2024-5914 is a critical command injection vulnerability in Palo Alto Networks Cortex XSOAR CommonScripts Pack that allows unauthenticated attacker...
Aug 14, 2024This vulnerability in Palo Alto Networks PAN-OS allows read-only administrators with config log access to unintentionally view secrets, passwords, and...
Aug 14, 2024CVE-2024-5910 is a critical authentication bypass vulnerability in Palo Alto Networks Expedition that allows unauthenticated attackers with network ac...
Jul 10, 2024An improper input validation vulnerability in Palo Alto Networks PAN-OS software allows attackers with physical file system access to elevate privileg...
Jul 10, 2024A local privilege escalation vulnerability in Palo Alto Networks Cortex XDR agent on Windows allows authenticated local users to execute programs with...
Jun 12, 2024A privilege escalation vulnerability in Palo Alto Networks Cortex XDR agent on Windows allows low-privileged local users to disable the endpoint prote...
Jun 12, 2024A local privilege bypass vulnerability in Palo Alto Networks Cortex XDR agent on Windows allows low-privileged users to disrupt some agent functionali...
Jun 12, 2024CVE-2024-3400 is a critical command injection vulnerability in Palo Alto Networks PAN-OS GlobalProtect feature that allows unauthenticated attackers t...
Apr 12, 2024A vulnerability in Palo Alto Networks PAN-OS software allows remote attackers to reboot firewalls by sending Windows NTLM packets from Windows servers...
Apr 10, 2024A memory leak vulnerability in Palo Alto Networks PAN-OS software allows attackers to send crafted packets that eventually cause the firewall to stop ...
Apr 10, 2024This DOM-based XSS vulnerability in Palo Alto Networks PAN-OS allows attackers to execute malicious JavaScript in an administrator's browser by tricki...
Dec 13, 2023This CVE describes a local privilege escalation vulnerability in Palo Alto Networks GlobalProtect app on Windows. It allows a local user to execute pr...
Jun 14, 2023This vulnerability in Palo Alto Networks PAN-OS software allows authenticated administrators to upload malicious configurations that can disrupt syste...
May 11, 2022A local privilege escalation vulnerability in Palo Alto Networks GlobalProtect app's Connect Before Logon feature allows attackers to gain SYSTEM or r...
Feb 10, 2022This CVE-2021-3059 is an OS command injection vulnerability in Palo Alto Networks PAN-OS management interface that allows man-in-the-middle attackers ...
Nov 10, 2021An improper access control vulnerability in PAN-OS allows authenticated GlobalProtect users to access the EC2 instance metadata endpoint on AWS-hosted...
Nov 10, 2021This is a critical memory corruption vulnerability in Palo Alto Networks GlobalProtect portal and gateway interfaces that allows unauthenticated attac...
Nov 10, 2021A memory corruption vulnerability in Palo Alto Networks PAN-OS GlobalProtect Clientless VPN allows authenticated attackers to execute arbitrary code w...
Nov 10, 2021An unauthenticated attacker can send specially crafted network traffic through Palo Alto Networks PAN-OS firewalls to crash the dataplane service. Rep...
Sep 8, 2021CVE-2021-3051 is an improper cryptographic signature verification vulnerability in Cortex XSOAR's SAML authentication that allows unauthenticated atta...
Sep 8, 2021This CVE describes a local privilege escalation vulnerability in Palo Alto Networks Cortex XDR agent on Windows. An authenticated local user with file...
Jul 15, 2021CVE-2021-3044 is an improper authorization vulnerability in Palo Alto Networks Cortex XSOAR that allows remote unauthenticated attackers with network ...
Jun 22, 2021This CVE describes a local privilege escalation vulnerability in Palo Alto Networks Cortex XDR agent on Windows. It allows authenticated local Windows...
Jun 10, 2021CVE-2021-3033 is an authentication bypass vulnerability in Palo Alto Networks Prisma Cloud Compute console that allows attackers to log in as any auth...
Feb 10, 2021A critical buffer overflow vulnerability in PAN-OS allows unauthenticated attackers to send malicious requests to the Captive Portal or Multi-Factor A...
Sep 9, 2020Why Monitor Paloaltonetworks Security Vulnerabilities?
Real-time CVE tracking: Our automated system monitors 49+ known vulnerabilities affecting Paloaltonetworks products and software packages. Stay ahead of emerging threats with instant email notifications when new security issues are discovered.
Automated security monitoring: Unlike manual CVE checking, FixTheCVE automatically scans your servers and detects vulnerable Paloaltonetworks packages in under 60 seconds. No agents required - completely agentless scanning that works across Paloaltonetworks deployments.
Free vulnerability database: Access detailed information about every Paloaltonetworks CVE including CVSS scores, severity ratings, affected versions, and actionable patch guidance. Filter by critical, high, medium, or low severity to prioritize your security remediation efforts.
🚀 Get Started in 60 Seconds
- Register free account & add your servers
- Run one-time scan or schedule automatic monitoring (every 1-24 hours)
- Receive instant alerts when new Paloaltonetworks CVEs affect your systems
- Access dashboard with severity breakdown & fix instructions
