Palo Alto Networks PAN-OS / GlobalProtect vulnerabilities

10 advisories, 10 actively exploited. Last update: October 14, 2026.

• CVE-2026-0322October 14, 2026High 7.2Exploited
  Palo Alto Networks PAN-OS Code Injection Vulnerability
• CVE-2026-0257May 29, 2026Critical 9.1Exploited
  Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
• CVE-2026-0300May 6, 2026Critical 9.8Exploited
  Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
• CVE-2025-0111February 20, 2025Medium 6.5Exploited
  Palo Alto Networks PAN-OS File Read Vulnerability
• CVE-2025-0108February 18, 2025Critical 9.1Exploited
  Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
• CVE-2024-3393December 30, 2024High 7.5Exploited
  Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
• CVE-2024-0012November 18, 2024Critical 9.8Exploited
  Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
• CVE-2024-9474November 18, 2024High 7.2Exploited
  Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
• CVE-2024-9463November 14, 2024High 7.5Exploited
  Palo Alto Networks Expedition OS Command Injection Vulnerability
• CVE-2024-3400April 12, 2024Critical 10Exploited
  Palo Alto Networks PAN-OS Command Injection Vulnerability