PAN-OS / GlobalProtect 10.2 vulnerabilities
9 advisories affect Palo Alto Networks PAN-OS / GlobalProtect 10.2, 9 already exploited by attackers. Latest: October 14, 2026.
Running PAN-OS / GlobalProtect 10.2 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on PAN-OS / GlobalProtect 10.2 alerts
Turn on PAN-OS / GlobalProtect 10.2 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-0322 · October 14, 2026 | High 7.2 Exploited | from 10.2.0 to 10.2.18-h12 (excluded) Fixed in 10.2.7-h38, 10.2.10-h41, 10.2.13-h26, 10.2.16-h11, 10.2.18-h12 |
| Palo Alto Networks PAN-OS Authentication Bypass Vulnerability CVE-2026-0257 · May 29, 2026 | Critical 9.1 Exploited | from 10.2.0 to 10.2.18-h6 (excluded) Fixed in 10.2.7-h34, 10.2.10-h36, 10.2.13-h21, 10.2.16-h7, 10.2.18-h6 |
| Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability CVE-2026-0300 · May 6, 2026 | Critical 9.8 Exploited | from 10.2.0 to 10.2.18-h6 (excluded) Fixed in 10.2.7-h34, 10.2.10-h36, 10.2.13-h21, 10.2.16-h7, 10.2.18-h6 |
| Palo Alto Networks PAN-OS File Read Vulnerability CVE-2025-0111 · February 20, 2025 | Medium 6.5 Exploited | from 10.2.0 to 10.2.7-h24 (excluded) Fixed in 10.2.7-h24, 10.2.8-h21, 10.2.9-h21, 10.2.10-h14, 10.2.11-h12, 10.2.12-h6, 10.2.13-h3 |
| Palo Alto Networks PAN-OS Authentication Bypass Vulnerability CVE-2025-0108 · February 18, 2025 | Critical 9.1 Exploited | from 10.2.0 to 10.2.7-h24 (excluded) Fixed in 10.2.7-h24, 10.2.8-h21, 10.2.9-h21, 10.2.10-h14, 10.2.11-h12, 10.2.12-h6, 10.2.13-h3 |
| Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability CVE-2024-3393 · December 30, 2024 | High 7.5 Exploited | from 10.2.8 to 10.2.8-h19 (excluded) Fixed in 10.2.8-h19, 10.2.9-h19, 10.2.10-h12, 10.2.11-h10, 10.2.12-h4, 10.2.13-h2, 10.2.14 |
| Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability CVE-2024-0012 · November 18, 2024 | Critical 9.8 Exploited | from 10.2.0 to 10.2.12-h2 (excluded) Fixed in 10.2.12-h2 |
| Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability CVE-2024-9474 · November 18, 2024 | High 7.2 Exploited | from 10.2.0 to 10.2.12-h2 (excluded) Fixed in 10.2.12-h2 |
| Palo Alto Networks PAN-OS Command Injection Vulnerability CVE-2024-3400 · April 12, 2024 | Critical 10 Exploited | from 10.2.0 to 10.2.9-h1 (excluded) Fixed in 10.2.9-h1 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.
Other PAN-OS / GlobalProtect versions: 12.1 · 11.2 · 11.1 · 11.0 · 10.1