Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Palo Alto Networks — Vulnerabilities & Security Advisories 364

Browse all 364 CVE security advisories affecting Palo Alto Networks. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Palo Alto Networks operates as a prominent cybersecurity vendor, primarily providing next-generation firewalls, cloud security solutions, and endpoint protection platforms to enterprise clients. The company’s software ecosystem, particularly its PAN-OS operating system, has historically been associated with a significant volume of Common Vulnerabilities and Exposures, currently totaling 280 recorded instances. These vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from input validation errors or improper access controls within management interfaces. While the firm maintains a robust security posture through regular patching cycles and proactive threat intelligence integration, the high CVE count reflects the complexity of its extensive feature set and the broad attack surface inherent in critical infrastructure components. Major incidents have been limited, with most issues resolved via timely updates, though the sheer number of disclosed flaws underscores the challenges of securing large-scale, continuously updated network security appliances.

CVE ID Title CVSS Severity Published
CVE-2026-45165 Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API — Idira Secrets Manager (Self-Hosted) CWE-863 8.6 High 2026-10-15
CVE-2026-0311 Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability — Checkov by Prisma Cloud CWE-918 1.1 Low 2026-10-14
CVE-2026-0312 Checkov by Prisma Cloud: Path Traversal Vulnerabilities — Checkov by Prisma Cloud CWE-22 4.3 Medium 2026-10-14
CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability — Cortex XSOAR OS Query CWE-78 6.1 Medium 2026-10-14
CVE-2026-0314 GlobalProtect App: Local Denial of Service (DoS) on Windows — GlobalProtect App CWE-843 4.3 Medium 2026-10-14
CVE-2026-0315 GlobalProtect App: Local Privilege Escalation Vulnerability on macOS — GlobalProtect App CWE-426 5.9 Medium 2026-10-14
CVE-2026-0316 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability — Cloud NGFW CWE-79 0.4 Low 2026-10-14
CVE-2026-0317 PAN-OS: Denial of Service Vulnerability — Cloud NGFW CWE-754 1.2 Low 2026-10-14
CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama — Cloud NGFW CWE-754 4.6 Medium 2026-10-14
CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability — Cloud NGFW CWE-754 4.9 Medium 2026-10-14
CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability — Cloud NGFW CWE-78 5.7 Medium 2026-10-14
CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services — Cloud NGFW CWE-754 6.6 Medium 2026-10-14
CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface — Cloud NGFW CWE-94 8.5 High 2026-10-14
CVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability — Checkov by Prisma Cloud CWE-78 1.1 Low 2026-09-10
CVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File — Checkov by Prisma Cloud CWE-829 2.4 Low 2026-09-10
CVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability — Cortex XDR Broker VM CWE-88 4.8 Medium 2026-09-10
CVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux — Prisma Access Agent CWE-200 4.3 Medium 2026-09-10
CVE-2026-0306 Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows — Prisma Access Agent CWE-693 5.8 Medium 2026-09-10
CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities — GlobalProtect App CWE-426 5.9 Medium 2026-09-10
CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface — Cloud NGFW CWE-79 0.4 Low 2026-09-10
CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration — Cloud NGFW CWE-78 4.0 Medium 2026-09-10
CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing — Cloud NGFW CWE-787 5.2 Medium 2026-09-10
CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering — Cloud NGFW CWE-908 0.5 Low 2026-08-13
CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities — GlobalProtect App CWE-426 5.9 Medium 2026-08-13
CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) — GlobalProtect App CWE-94 5.2 Medium 2026-08-13
CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake — GlobalProtect App CWE-787 5.2 Medium 2026-08-13
CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability — GlobalProtect App CWE-295 4.5 Medium 2026-08-13
CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS — GlobalProtect App CWE-362 4.1 Medium 2026-08-13
CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation — Prisma Access Agent CWE-427 6.0 Medium 2026-08-13
CVE-2026-0293 Prisma Access Agent: Anti-Tamper Protection Bypass on Windows — Prisma Access Agent CWE-693 5.6 Medium 2026-08-13

This page lists every published CVE security advisory associated with Palo Alto Networks. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.