Palo Alto NetworksPAN-OS / GlobalProtect

PAN-OS / GlobalProtect 12.1 vulnerabilities

3 advisories affect Palo Alto Networks PAN-OS / GlobalProtect 12.1, 3 already exploited by attackers. Latest: October 14, 2026.

Running PAN-OS / GlobalProtect 12.1 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on PAN-OS / GlobalProtect 12.1 alerts
VulnerabilitySeverityAffected versions
Palo Alto Networks PAN-OS Code Injection Vulnerability
CVE-2026-0322 · October 14, 2026
High 7.2 Exploitedfrom 12.1.0 to 12.1.10-h2 (excluded)
Fixed in 12.1.4-h12, 12.1.7-h8, 12.1.10-h2
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
CVE-2026-0257 · May 29, 2026
Critical 9.1 Exploitedfrom 12.1.0 to 12.1.7 (excluded)
Fixed in 12.1.4-h6, 12.1.7
Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
CVE-2026-0300 · May 6, 2026
Critical 9.8 Exploitedfrom 12.1.0 to 12.1.7 (excluded)
Fixed in 12.1.4-h5, 12.1.7

Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.

Other PAN-OS / GlobalProtect versions: 11.2 · 11.1 · 11.0 · 10.2 · 10.1