Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Palo Alto Networks — Vulnerabilities & Security Advisories 364

Browse all 364 CVE security advisories affecting Palo Alto Networks. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Palo Alto Networks operates as a prominent cybersecurity vendor, primarily providing next-generation firewalls, cloud security solutions, and endpoint protection platforms to enterprise clients. The company’s software ecosystem, particularly its PAN-OS operating system, has historically been associated with a significant volume of Common Vulnerabilities and Exposures, currently totaling 280 recorded instances. These vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from input validation errors or improper access controls within management interfaces. While the firm maintains a robust security posture through regular patching cycles and proactive threat intelligence integration, the high CVE count reflects the complexity of its extensive feature set and the broad attack surface inherent in critical infrastructure components. Major incidents have been limited, with most issues resolved via timely updates, though the sheer number of disclosed flaws underscores the challenges of securing large-scale, continuously updated network security appliances.

CVE ID Title CVSS Severity Published
CVE-2026-0244 Prisma SD-WAN: Improper Certificate Validation Vulnerability — Prisma SD-WAN ION CWE-295 - - 2026-05-13
CVE-2026-0241 Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities — Trust Protection Foundation CWE-754 - - 2026-05-13
CVE-2026-0245 Prisma Access Agent: Information Disclosure Vulnerabilities — Prisma Access Agent CWE-200 - - 2026-05-13
CVE-2026-0240 Trust Protection Foundation: Sensitive Information Disclosure Vulnerability — Trust Protection Foundation CWE-497 - - 2026-05-13
CVE-2026-0246 Prisma Access Agent: Local Privilege Escalation Vulnerability — Prisma Access Agent CWE-862 - - 2026-05-13
CVE-2026-0247 Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities — Prisma Access Agent CWE-306 - - 2026-05-13
CVE-2026-0249 GlobalProtect App: Certificate Validation Bypass Vulnerabilities — GlobalProtect App CWE-295 - - 2026-05-13
CVE-2026-0239 Chronosphere Chronocollector Information Disclosure Vulnerability — Chronosphere Chronocollector CWE-497 - - 2026-05-13
CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway — GlobalProtect App CWE-787 - - 2026-05-13
CVE-2026-0238 Broker VM: Improper Input Validation in Broker VM Certificate and Key Fields — Broker VM CWE-20 - - 2026-05-13
CVE-2026-0251 GlobalProtect App: Local Privilege Escalation Vulnerabilities — GlobalProtect App CWE-426 - - 2026-05-13
CVE-2026-0256 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface — Cloud NGFW CWE-79 4.4 Medium 2026-05-13
CVE-2026-0257 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities — Cloud NGFW CWE-565 7.8 High 2026-05-13
CVE-2026-0235 Prisma Browser: Access and Data Rule Bypass — Prisma Browser CWE-754 - - 2026-05-13
CVE-2026-0258 PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching — Cloud NGFW CWE-918 4.8 Medium 2026-05-13
CVE-2026-0259 WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B) — WildFire WF-500 and WF-500-B CWE-73 - - 2026-05-13
CVE-2026-0261 PAN-OS: Authenticated Admin Command Injection Vulnerability — Cloud NGFW CWE-78 5.7 Medium 2026-05-13
CVE-2026-0236 Prisma Browser: Code Injection Enables Security Controls Bypass — Prisma Browser CWE-94 - - 2026-05-13
CVE-2026-0262 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing — Cloud NGFW CWE-754 6.6 Medium 2026-05-13
CVE-2026-0237 Prisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass — Prisma Browser CWE-424 - - 2026-05-13
CVE-2026-0263 PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing — Cloud NGFW CWE-787 - - 2026-05-13
CVE-2026-0264 PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution — Cloud NGFW CWE-122 6.6 Medium 2026-05-13
CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled — Cloud NGFW CWE-347 2.7 Low 2026-05-13
CVE-2026-0300 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal — Cloud NGFW CWE-787 8.7 High 2026-05-06
CVE-2026-0232 Cortex XDR Agent: Local Administrator can disable the agent on Windows — Cortex XDR Agent CWE-15 6.0 - 2026-04-13
CVE-2026-0233 Autonomous Digital Experience Manager: Improper validation of ADEM certificate — Autonomous Digital Experience Manager CWE-295 8.8 - 2026-04-13
CVE-2026-0234 Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration — Cortex XSOAR Microsoft Teams Marketplace CWE-347 9.1 - 2026-04-13
CVE-2026-0231 Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability — Cortex XDR Broker VM CWE-497 8.1AI High AI 2026-03-11
CVE-2026-0230 Cortex XDR Agent: Local Administrator can disable the agent on macOS — Cortex XDR Agent CWE-754 6.0AI Medium AI 2026-03-11
CVE-2026-0229 PAN-OS: Denial of Service in Advanced DNS Security Feature — Cloud NGFW CWE-754 7.5AI High AI 2026-02-11

This page lists every published CVE security advisory associated with Palo Alto Networks. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.