Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Palo Alto Networks — Vulnerabilities & Security Advisories 342

Browse all 342 CVE security advisories affecting Palo Alto Networks. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Palo Alto Networks operates as a prominent cybersecurity vendor, primarily providing next-generation firewalls, cloud security solutions, and endpoint protection platforms to enterprise clients. The company’s software ecosystem, particularly its PAN-OS operating system, has historically been associated with a significant volume of Common Vulnerabilities and Exposures, currently totaling 280 recorded instances. These vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from input validation errors or improper access controls within management interfaces. While the firm maintains a robust security posture through regular patching cycles and proactive threat intelligence integration, the high CVE count reflects the complexity of its extensive feature set and the broad attack surface inherent in critical infrastructure components. Major incidents have been limited, with most issues resolved via timely updates, though the sheer number of disclosed flaws underscores the challenges of securing large-scale, continuously updated network security appliances.

Found 37 results / 342 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities — GlobalProtect App CWE-426 5.9 Medium 2026-08-13
CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) — GlobalProtect App CWE-94 5.2 Medium 2026-08-13
CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake — GlobalProtect App CWE-787 5.2 Medium 2026-08-13
CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability — GlobalProtect App CWE-295 4.5 Medium 2026-08-13
CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS — GlobalProtect App CWE-362 4.1 Medium 2026-08-13
CVE-2026-0267 GlobalProtect App: Information Exposure Vulnerability on macOS — GlobalProtect App CWE-532 - - 2026-06-10
CVE-2026-0249 GlobalProtect App: Certificate Validation Bypass Vulnerabilities — GlobalProtect App CWE-295 - - 2026-05-13
CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway — GlobalProtect App CWE-787 - - 2026-05-13
CVE-2026-0251 GlobalProtect App: Local Privilege Escalation Vulnerabilities — GlobalProtect App CWE-426 - - 2026-05-13
CVE-2025-2183 GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation — GlobalProtect App CWE-295 8.0AI High AI 2025-08-13
CVE-2025-2179 GlobalProtect App: Non Admin User Can Disable the GlobalProtect App — GlobalProtect App CWE-266 6.1AI Medium AI 2025-07-29
CVE-2025-0141 GlobalProtect App: Privilege Escalation (PE) Vulnerability — GlobalProtect App CWE-426 7.8AI High AI 2025-07-09
CVE-2025-0140 GlobalProtect App: Non Admin User Can Disable the GlobalProtect App — GlobalProtect App CWE-266 7.1AI High AI 2025-07-09
CVE-2025-4227 GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement — GlobalProtect App CWE-319 4.6AI Medium AI 2025-06-13
CVE-2025-4232 GlobalProtect: Authenticated Code Injection Through Wildcard on macOS — GlobalProtect App CWE-155 7.8AI High AI 2025-06-12
CVE-2025-0135 GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App — GlobalProtect App CWE-266 7.1AI High AI 2025-05-14
CVE-2025-0120 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability — GlobalProtect App CWE-250 7.0AI High AI 2025-04-11
CVE-2025-0118 GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability — GlobalProtect App CWE-618 8.8 - 2025-03-12
CVE-2025-0117 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability — GlobalProtect App CWE-807 7.8 - 2025-03-12
CVE-2024-5921 GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation — GlobalProtect App CWE-295 8.0AI High AI 2024-11-27
CVE-2024-9473 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability — GlobalProtect App CWE-250 7.8AI High AI 2024-10-09
CVE-2024-5915 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability — GlobalProtect App CWE-732 7.8AI High AI 2024-08-14
CVE-2024-5908 GlobalProtect App: Encrypted Credential Exposure via Log Files — GlobalProtect App CWE-532 5.5AI Medium AI 2024-06-12
CVE-2024-2432 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability — GlobalProtect App CWE-269 4.5 Medium 2024-03-13
CVE-2024-2431 GlobalProtect App: Local User Can Disable GlobalProtect — GlobalProtect App CWE-269 5.5 Medium 2024-03-13
CVE-2023-0009 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability — GlobalProtect App CWE-807 7.8 High 2023-06-14
CVE-2023-0006 GlobalProtect App: Local File Deletion Vulnerability — GlobalProtect app CWE-367 6.3 Medium 2023-04-12
CVE-2022-0021 GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon — GlobalProtect App CWE-532 3.3 Low 2022-02-10
CVE-2022-0019 GlobalProtect App: Insufficiently Protected Credentials Vulnerability on Linux — GlobalProtect App CWE-522 4.7 Medium 2022-02-10
CVE-2022-0018 GlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On Enabled — GlobalProtect App CWE-201 6.1 Medium 2022-02-10

This page lists every published CVE security advisory associated with Palo Alto Networks. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.