vciy

CVEs we hold for Palo

Records whose assigning authority named Palo as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-45165Idira Secrets Manager (Self-Hosted): Improper Authorization in REST APIPalo Alto Networks Idira Secrets Manager (Self-Hosted)
CVE-2026-0322PAN-OS: Authenticated Remote Code Execution (RCE) in the Management InterfacePalo Alto Networks Prisma Access
CVE-2026-0321PAN-OS: Denial of Service (DoS) Vulnerabilities in Network ServicesPalo Alto Networks Prisma Access
CVE-2026-0320PAN-OS: Authenticated Admin Command Injection VulnerabilityPalo Alto Networks Prisma Access
CVE-2026-0319PAN-OS: Improper Input Handling VulnerabilityPalo Alto Networks Prisma Access
CVE-2026-0318PAN-OS: Denial of Service (DoS) on PanoramaPalo Alto Networks Prisma Access
CVE-2026-0317PAN-OS: Denial of Service VulnerabilityPalo Alto Networks Prisma Access
CVE-2026-0316PAN-OS: Stored Cross-Site Scripting (XSS) VulnerabilityPalo Alto Networks Prisma Access
CVE-2026-0315GlobalProtect App: Local Privilege Escalation Vulnerability on macOSPalo Alto Networks GlobalProtect App
CVE-2026-0314GlobalProtect App: Local Denial of Service (DoS) on WindowsPalo Alto Networks GlobalProtect App
CVE-2026-0313Cortex XSOAR: OS Command Injection VulnerabilityPalo Alto Networks Cortex XSIAM OS Query
CVE-2026-0312Checkov by Prisma Cloud: Path Traversal VulnerabilitiesPalo Alto Networks Checkov by Prisma Cloud
CVE-2026-0311Checkov by Prisma Cloud: Server-Side Request Forgery VulnerabilityPalo Alto Networks Checkov by Prisma Cloud
CVE-2026-0310PAN-OS: Buffer Overflow Vulnerability via XML ProcessingPalo Alto Networks Prisma Access
CVE-2026-0309PAN-OS: Authenticated Command Injection in CLI with Luna HSM ConfigurationPalo Alto Networks Prisma Access
CVE-2026-0308PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfacePalo Alto Networks Prisma Access
CVE-2026-0307GlobalProtect App: Local Privilege Escalation VulnerabilitiesPalo Alto Networks GlobalProtect App
CVE-2026-0306Prisma Access Agent: EndPoint DLP Bypass Vulnerability on WindowsPalo Alto Networks Prisma Access Agent
CVE-2026-0305Prisma Access Agent: Information Disclosure Vulnerability on LinuxPalo Alto Networks Prisma Access Agent
CVE-2026-0304Cortex XDR Broker VM: Privilege Escalation VulnerabilityPalo Alto Networks Cortex XDR Broker VM
CVE-2026-0303Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration FilePalo Alto Networks Checkov by Prisma Cloud
CVE-2026-0302Checkov by Prisma Cloud: OS Command Injection VulnerabilityPalo Alto Networks Checkov by Prisma Cloud
CVE-2026-0301PAN-OS: Information Disclosure Vulnerability in URL FilteringPalo Alto Networks Prisma Access
CVE-2026-0300PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication PortalPalo Alto Networks Prisma Access
CVE-2026-0299GlobalProtect App: Local Privilege Escalation VulnerabilitiesPalo Alto Networks GlobalProtect App
CVE-2026-0298GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)Palo Alto Networks GlobalProtect App
CVE-2026-0297GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel HandshakePalo Alto Networks GlobalProtect App
CVE-2026-0296GlobalProtect App: Improper Certificate Validation Bypass VulnerabilityPalo Alto Networks GlobalProtect App
CVE-2026-0295GlobalProtect App: Local Privilege Escalation via Race Condition on macOSPalo Alto Networks GlobalProtect App
CVE-2026-0294Prisma Access Agent: Local Privilege EscalationPalo Alto Networks Prisma Access Agent
CVE-2026-0293Prisma Access Agent: Anti-Tamper Protection Bypass on WindowsPalo Alto Networks Prisma Access Agent
CVE-2026-0292Prisma Access Agent: Local Security Inspection Bypass Vulnerability on WindowsPalo Alto Networks Prisma Access Agent
CVE-2026-0291Prisma Access Agent: Authenticated Limited File Deletion on LinuxPalo Alto Networks Prisma Access Agent
CVE-2026-0290Prisma Browser: Sensitive Information Disclosure VulnerabilityPalo Alto Networks Prisma Browser
CVE-2026-0289Prisma Browser: Inappropriate Implementation in Account ProtectionPalo Alto Networks Prisma Browser
CVE-2026-0288PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server AgentPalo Alto Networks Prisma Access
CVE-2026-0287PAN-OS: Denial of Service Vulnerabilities in Network Traffic ProcessingPalo Alto Networks Prisma Access
CVE-2026-0286PAN-OS: Authenticated Command Injection in CLIPalo Alto Networks Prisma Access
CVE-2026-0285PAN-OS: Server-Side Request Forgery Vulnerability in Management Web InterfacePalo Alto Networks Prisma Access
CVE-2026-0284PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)Palo Alto Networks Prisma Access
CVE-2026-0283PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)Palo Alto Networks Prisma Access
CVE-2026-0282PAN-OS: File Deletion Vulnerability in Management Web InterfacePalo Alto Networks Prisma Access
CVE-2026-0281PAN-OS: Information Disclosure Vulnerability in Management Web InterfacePalo Alto Networks Prisma Access
CVE-2026-0280PAN-OS: IPv6 Firewall Policy BypassPalo Alto Networks Prisma Access
CVE-2026-0279PAN-OS: Multiple Cross-Site Scripting (XSS) VulnerabilitiesPalo Alto Networks Prisma Access
CVE-2026-0278Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on WindowsPalo Alto Networks Prisma Access Agent
CVE-2026-0277Prisma Access Agent: Improper Certificate Validation on iOSPalo Alto Networks Prisma Access Agent
CVE-2026-0276Cortex XDR Broker VM: Privilege Escalation (PE) VulnerabilityPalo Alto Networks Cortex XDR Broker VM
CVE-2026-0275Prisma Browser: Local Privilege Escalation on macOSPalo Alto Networks Prisma Browser
CVE-2026-0274Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integrationPalo Alto Networks Cortex XSOAR CommvaultSecurityIQ…
CVE-2026-0273PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UIPalo Alto Networks Prisma Access
CVE-2026-0272PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)Palo Alto Networks Prisma Access
CVE-2026-0271Prisma Access Agent: Local Privilege Escalation by Authorized UsersPalo Alto Networks Prisma Access Agent
CVE-2026-0270Cortex XSOAR: Path Traversal VulnerabilityPalo Alto Networks Cortex XSOAR
CVE-2026-0269PAN-OS: Denial of Service (DoS) in Tunnel Traffic ProcessingPalo Alto Networks Prisma Access
CVE-2026-0268Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on LinuxPalo Alto Networks Prisma Access Agent
CVE-2026-0267GlobalProtect App: Information Exposure Vulnerability on macOSPalo Alto Networks GlobalProtect UWP App
CVE-2026-0266PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfacePalo Alto Networks Prisma Access
CVE-2026-0265PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabledPalo Alto Networks Prisma Access
CVE-2026-0264PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code ExecutionPalo Alto Networks Prisma Access
CVE-2026-0263PAN-OS: Remote Code Execution (RCE) in IKEv2 ProcessingPalo Alto Networks Prisma Access
CVE-2026-0262PAN-OS: Denial of Service Vulnerabilities in Network Traffic ParsingPalo Alto Networks Prisma Access
CVE-2026-0261PAN-OS: Authenticated Admin Command Injection VulnerabilityPalo Alto Networks Prisma Access
CVE-2026-0259WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)Palo Alto Networks WildFire WF-500 and WF-500-B
CVE-2026-0258PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL FetchingPalo Alto Networks Prisma Access
CVE-2026-0257PAN-OS: GlobalProtect Authentication Bypass VulnerabilitiesPalo Alto Networks Prisma Access
CVE-2026-0256PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfacePalo Alto Networks Prisma Access
CVE-2026-0251GlobalProtect App: Local Privilege Escalation VulnerabilitiesPalo Alto Networks Global Protect App
CVE-2026-0250GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or GatewayPalo Alto Networks GlobalProtect UWP App
CVE-2026-0249GlobalProtect App: Certificate Validation Bypass VulnerabilitiesPalo Alto Networks GlobalProtect App
CVE-2026-0248Prisma Access Agent: Improper Certificate Validation VulnerabilityPalo Alto Networks Prisma Access Agent
CVE-2026-0247Prisma Access Agent Endpoint DLP: Authorization Bypass VulnerabilitiesPalo Alto Networks Prisma Access Agent
CVE-2026-0246Prisma Access Agent: Local Privilege Escalation VulnerabilityPalo Alto Networks Prisma Access Agent
CVE-2026-0245Prisma Access Agent: Information Disclosure VulnerabilitiesPalo Alto Networks Prisma Access Agent
CVE-2026-0244Prisma SD-WAN: Improper Certificate Validation VulnerabilityPalo Alto Networks Prisma SD-WAN ION
CVE-2026-0243Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted PacketPalo Alto Networks Prisma SD-WAN ION
CVE-2026-0242Trust Protection Foundation: SQL Injection VulnerabilityPalo Alto Networks Trust Protection Foundation
CVE-2026-0241Trust Protection Foundation: Multiple Authorization Bypass VulnerabilitiesPalo Alto Networks Trust Protection Foundation
CVE-2026-0240Trust Protection Foundation: Sensitive Information Disclosure VulnerabilityPalo Alto Networks Trust Protection Foundation
CVE-2026-0239Chronosphere Chronocollector Information Disclosure VulnerabilityPalo Alto Networks Chronosphere Chronocollector
CVE-2026-0238Broker VM: Improper Input Validation in Broker VM Certificate and Key FieldsPalo Alto Networks Broker VM
CVE-2026-0237Prisma Browser: Improperly Restricted Automation Bridge Allows Security BypassPalo Alto Networks Prisma Browser
CVE-2026-0236Prisma Browser: Code Injection Enables Security Controls BypassPalo Alto Networks Prisma Browser
CVE-2026-0235Prisma Browser: Access and Data Rule BypassPalo Alto Networks Prisma Browser
CVE-2026-0234Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integrationPalo Alto Networks Cortex XSIAM Microsoft Teams Marketplace
CVE-2026-0233Autonomous Digital Experience Manager: Improper validation of ADEM certificatePalo Alto Networks Autonomous Digital Experience Manager
CVE-2026-0232Cortex XDR Agent: Local Administrator can disable the agent on WindowsPalo Alto Networks Cortex XDR Agent
CVE-2026-0231Cortex XDR Broker VM: Sensitive Information Disclosure VulnerabilityPalo Alto Networks Cortex XDR Broker VM
CVE-2026-0230Cortex XDR Agent: Local Administrator can disable the agent on macOSPalo Alto Networks Cortex XDR Agent
CVE-2026-0229PAN-OS: Denial of Service in Advanced DNS Security FeaturePalo Alto Networks Prisma Access
CVE-2026-0228PAN-OS: Improper Validation of Terminal Server Agent CertificatePalo Alto Networks Prisma Access
CVE-2026-0227PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and PortalPalo Alto Networks Prisma Access
CVE-2025-4619PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted PacketsPalo Alto Networks Prisma Access
CVE-2025-4618Prisma Browser: Sensitive Information Disclosure Vulnerability in Prisma BrowserPalo Alto Networks Prisma Browser
CVE-2025-4617Prisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma BrowserPalo Alto Networks Prisma Browser
CVE-2025-4616Prisma Browser: Insufficient Validation of Untrusted Input Vulnerability in Prisma BrowserPalo Alto Networks Prisma Browser
CVE-2025-4615PAN-OS: Improper Neutralization of Input in the Management Web InterfacePalo Alto Networks Prisma Access
CVE-2025-4614PAN-OS: Session Token Disclosure VulnerabilityPalo Alto Networks Prisma Access
CVE-2025-4235User-ID Credential Agent: Cleartext Exposure of Service Account passwordPalo Alto Networks User-ID Credential Agent
CVE-2025-4234Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of CredentialsPalo Alto Networks Cortex XDR Microsoft 365 Defender Pack
CVE-2025-4233Prisma Access Browser: Inappropriate implementation in CachePalo Alto Networks Prisma Access Browser
CVE-2025-4232GlobalProtect: Authenticated Code Injection Through Wildcard on macOSPalo Alto Networks GlobalProtect App
CVE-2025-4231PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web InterfacePalo Alto Networks Prisma Access
CVE-2025-4230PAN-OS: Authenticated Admin Command Injection Vulnerability Through CLIPalo Alto Networks Prisma Access
CVE-2025-4229PAN-OS: Traffic Information Disclosure VulnerabilityPalo Alto Networks Prisma Access
CVE-2025-4228Cortex XDR Broker VM: Privilege Escalation (PE) VulnerabilityPalo Alto Networks Cortex XDR Broker VM
CVE-2025-4227GlobalProtect App: Interception in Endpoint Traffic Policy EnforcementPalo Alto Networks GlobalProtect App
CVE-2025-2184Cortex XDR Broker VM: Secrets Shared Across Multiple Broker VM ImagesPalo Alto Networks Cortex XDR Broker VM
CVE-2025-2183GlobalProtect App: Improper Certificate Validation Leads to Privilege EscalationPalo Alto Networks Global Protect UWP App
CVE-2025-2182PAN-OS: Firewall Clusters using the MACsec Protocol Expose the Connectivity Association Key (CAK)Palo Alto Networks Prisma Access
CVE-2025-2181Checkov by Prisma Cloud: Cleartext Exposure of CredentialsPalo Alto Networks Checkov by Prisma Cloud
CVE-2025-2180Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code ExecutionPalo Alto Networks Checkov by Prisma Cloud
CVE-2025-2179GlobalProtect App: Non Admin User Can Disable the GlobalProtect AppPalo Alto Networks GlobalProtect UWP App
CVE-2025-0141GlobalProtect App: Privilege Escalation (PE) VulnerabilityPalo Alto Networks GlobalProtect UWP App
CVE-2025-0140GlobalProtect App: Non Admin User Can Disable the GlobalProtect AppPalo Alto Networks GlobalProtect UWP App
CVE-2025-0139Autonomous Digital Experience Manager: Privilege Escalation (PE) VulnerabilityPalo Alto Networks Autonomous Digital Experience Manager
CVE-2025-0138Prisma Cloud Compute Edition: Insufficient Session Expiration Vulnerability in the Web InterfacePalo Alto Networks Compute in Prisma Cloud Enterprise…
CVE-2025-0137PAN-OS: Improper Neutralization of Input in the Management Web InterfacePalo Alto Networks PAN-OS
CVE-2025-0136PAN-OS: Unencrypted Data Transfer when using AES-128-CCM on Intel-based hardware devicesPalo Alto Networks Prisma Access
CVE-2025-0135GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect AppPalo Alto Networks GlobalProtect UWP App
CVE-2025-0134Cortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VMPalo Alto Networks Cortex XDR Broker VM
CVE-2025-0133PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and PortalPalo Alto Networks Prisma Access
CVE-2025-0132Cortex XDR Broker VM: Unauthenticated User Can Disable Internal ServicesPalo Alto Networks Cortex XDR Broker VM
CVE-2025-0130PAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted PacketsPalo Alto Networks Prisma Access
CVE-2025-0129Prisma Access Browser: Inappropriate control behavior in Prisma Access BrowserPalo Alto Networks Prisma Access Browser
CVE-2025-0128PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted PacketPalo Alto Networks Prisma Access
CVE-2025-0127PAN-OS: Authenticated Admin Command Injection Vulnerability in PAN-OS VM-SeriesPalo Alto Networks Prisma Access
CVE-2025-0126PAN-OS: Session Fixation Vulnerability in GlobalProtect SAML LoginPalo Alto Networks Prisma Access
CVE-2025-0125PAN-OS: Improper Neutralization of Input in the Management Web InterfacePalo Alto Networks Prisma Access
CVE-2025-0124PAN-OS: Authenticated File Deletion Vulnerability on the Management Web InterfacePalo Alto Networks Prisma Access
CVE-2025-0123PAN-OS: Information Disclosure Vulnerability in HTTP/2 Packet CapturesPalo Alto Networks Prisma Access
CVE-2025-0122Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through Burst of Crafted PacketsPalo Alto Networks Prisma SD-WAN
CVE-2025-0121Cortex XDR Agent: Local Windows User Can Crash the AgentPalo Alto Networks Cortex XDR Agent
CVE-2025-0120GlobalProtect App: Local Privilege Escalation (PE) VulnerabilityPalo Alto Networks GlobalProtect UWP App
CVE-2025-0119Cortex XDR Broker VM: Authenticated Command Injection Vulnerability in Broker VMPalo Alto Networks Cortex XDR Broker VM
CVE-2025-0118GlobalProtect App: Execution of Unsafe ActiveX Control VulnerabilityPalo Alto Networks GlobalProtect UWP App
CVE-2025-0117GlobalProtect App: Local Privilege Escalation (PE) VulnerabilityPalo Alto Networks GlobalProtect UWP App
CVE-2025-0116PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP FramePalo Alto Networks Prisma Access
CVE-2025-0115PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLIPalo Alto Networks Prisma Access
CVE-2025-0114PAN-OS: Denial of Service (DoS) in GlobalProtectPalo Alto Networks Prisma Access
CVE-2025-0113Cortex XDR Broker VM: Unauthorized Access to Broker VM Docker ContainersPalo Alto Networks Cortex XDR Broker VM
CVE-2025-0112Cortex XDR Agent: Local Windows User Can Disable the AgentPalo Alto Networks Cortex XDR Agent
CVE-2025-0111PAN-OS: Authenticated File Read Vulnerability in the Management Web InterfacePalo Alto Networks Prisma Access
CVE-2025-0110PAN-OS OpenConfig Plugin: Command Injection Vulnerability in OpenConfig PluginPalo Alto Networks PAN-OS OpenConfig Plugin
CVE-2025-0109PAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web InterfacePalo Alto Networks Prisma Access
CVE-2025-0108PAN-OS: Authentication Bypass in the Management Web InterfacePalo Alto Networks Prisma Access
CVE-2025-0107Expedition: OS Command Injection VulnerabilityPalo Alto Networks Prisma Access
CVE-2025-0106Expedition: Wildcard Expansion VulnerabilityPalo Alto Networks Prisma Access
CVE-2025-0105Expedition: Arbitrary File Deletion VulnerabilityPalo Alto Networks Prisma Access
CVE-2025-0104Expedition: Cross-Site Scripting (XSS) VulnerabilityPalo Alto Networks Prisma Access
CVE-2025-0103Expedition: SQL Injection VulnerabilityPalo Alto Networks Prisma Access
CVE-2024-9474PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management InterfacePalo Alto Networks Prisma Access
CVE-2024-9473GlobalProtect App: Local Privilege Escalation (PE) VulnerabilityPalo Alto Networks GlobalProtect App
CVE-2024-9472PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted TrafficPalo Alto Networks Prisma Access
CVE-2024-9471PAN-OS: Privilege Escalation (PE) Vulnerability in XML APIPalo Alto Networks Prisma Access
CVE-2024-9470Cortex XSOAR: Information Disclosure VulnerabilityPalo Alto Networks Cortex XSOAR
CVE-2024-9469Cortex XDR Agent: Local Windows User Can Disable the AgentPalo Alto Networks Cortex XDR Agent
CVE-2024-9468PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted PacketPalo Alto Networks Prisma Access
CVE-2024-9467Expedition: Reflected Cross-Site Scripting Vulnerability Leads to Expedition Session DisclosurePalo Alto Networks Expedition
CVE-2024-9466Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential DisclosurePalo Alto Networks Expedition
CVE-2024-9465Expedition: SQL Injection Leads to Firewall Admin Credential DisclosurePalo Alto Networks Expedition
CVE-2024-9464Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential DisclosurePalo Alto Networks Expedition
CVE-2024-9463Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential DisclosurePalo Alto Networks Expedition
CVE-2024-8691PAN-OS: User Impersonation in GlobalProtect PortalPalo Alto Networks Prisma Access
CVE-2024-8690Cortex XDR Agent: Local Windows Administrator Can Disable the AgentPalo Alto Networks Cortex XDR Agent
CVE-2024-8689ActiveMQ Content Pack: Cleartext Exposure of CredentialsPalo Alto Networks ActiveMQ Content Pack
CVE-2024-8688PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)Palo Alto Networks Prisma Access
CVE-2024-8687PAN-OS: Cleartext Exposure of GlobalProtect Portal PasscodesPalo Alto Networks Prisma Access
CVE-2024-8686PAN-OS: Command Injection VulnerabilityPalo Alto Networks Prisma Access
CVE-2024-5921GlobalProtect App: Insufficient Certificate Validation Leads to Privilege EscalationPalo Alto Networks GlobalProtect App
CVE-2024-5920PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate AdministratorPalo Alto Networks Prisma Access
CVE-2024-5919PAN-OS: Authenticated XML External Entities (XXE) Injection VulnerabilityPalo Alto Networks Prisma Access
CVE-2024-5918PAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect UserPalo Alto Networks Prisma Access
CVE-2024-5917PAN-OS: Server-Side Request Forgery in WildFirePalo Alto Networks PAN-OS
CVE-2024-5916PAN-OS: Cleartext Exposure of External System SecretsPalo Alto Networks Prisma Access
CVE-2024-5915GlobalProtect App: Local Privilege Escalation (PE) VulnerabilityPalo Alto Networks GlobalProtect App
CVE-2024-5914Cortex XSOAR: Command Injection in CommonScripts PackPalo Alto Networks Cortex XSOAR CommonScripts
CVE-2024-5913PAN-OS: Improper Input Validation Vulnerability in PAN-OSPalo Alto Networks Prisma Access
CVE-2024-5912Cortex XDR Agent: Improper File Signature Verification ChecksPalo Alto Networks Cortex XDR Agent
CVE-2024-5911PAN-OS: File Upload Vulnerability in the Panorama Web InterfacePalo Alto Networks Prisma Access
CVE-2024-5910Expedition: Missing Authentication Leads to Admin Account TakeoverPalo Alto Networks Expedition
CVE-2024-5909Cortex XDR Agent: Local Windows User Can Disable the AgentPalo Alto Networks Cortex XDR Agent
CVE-2024-5908GlobalProtect App: Encrypted Credential Exposure via Log FilesPalo Alto Networks GlobalProtect App
CVE-2024-5907Cortex XDR Agent: Local Privilege Escalation (PE) VulnerabilityPalo Alto Networks Cortex XDR Agent
CVE-2024-5906Prisma Cloud Compute: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfacePalo Alto Networks Prisma Cloud Compute
CVE-2024-5905Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the AgentPalo Alto Networks Cortex XDR Agent
CVE-2024-54205WordPress Paloma Widget plugin <= 1.14 - CSRF to Stored XSS vulnerabilityPaloma Widget
CVE-2024-3400PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtectPalo Alto Networks Prisma Access
CVE-2024-3393PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted PacketPalo Alto Networks PAN-OS
CVE-2024-3388PAN-OS: User Impersonation in GlobalProtect SSL VPNPalo Alto Networks Prisma Access
CVE-2024-3387PAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information DisclosurePalo Alto Networks Prisma Access
CVE-2024-3386PAN-OS: Predefined Decryption Exclusions Does Not Work as IntendedPalo Alto Networks Prisma Access
CVE-2024-3385PAN-OS: Firewall Denial of Service (DoS) when GTP Security is DisabledPalo Alto Networks Prisma Access
CVE-2024-3384PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM PacketsPalo Alto Networks Prisma Access
CVE-2024-3383PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)Palo Alto Networks Prisma Access
CVE-2024-3382PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted PacketsPalo Alto Networks Prisma Access
CVE-2024-2552PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)Palo Alto Networks Prisma Access
CVE-2024-2551PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted PacketPalo Alto Networks Prisma Access
CVE-2024-2550PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted PacketPalo Alto Networks Prisma Access
CVE-2024-2433PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability LossPalo Alto Networks Prisma Access

200 records, read from the index as it stood on 18 Oct 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.