netVigilance Vulnerability intelligence since 2004

Palo Alto Networks

15 Palo Alto Networks vulnerabilities with confirmed exploitation in the wild, as published by CISA; 15 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Palo Alto Networks
Vulnerability Status
overdue 101d2026-06-01 CVE-2026-0257 Palo Alto Networks / PAN-OS Palo Alto Networks PAN-OS Authentication Bypass Vulnerability 2026-05-29 7.8 past dueransomware
overdue 124d2026-05-09 CVE-2026-0300 Palo Alto Networks / PAN-OS Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability 2026-05-06 9.3 past due
overdue 546d2025-03-13 CVE-2025-0111 Palo Alto Networks / PAN-OS Palo Alto Networks PAN-OS File Read Vulnerability 2025-02-20 7.1 past due
overdue 548d2025-03-11 CVE-2025-0108 Palo Alto Networks / PAN-OS Palo Alto Networks PAN-OS Authentication Bypass Vulnerability 2025-02-18 8.8 past due
overdue 598d2025-01-20 CVE-2024-3393 Palo Alto Networks / PAN-OS Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability 2024-12-30 8.7 past due
overdue 640d2024-12-09 CVE-2024-9474 Palo Alto Networks / PAN-OS Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability 2024-11-18 6.9 past dueransomware
overdue 640d2024-12-09 CVE-2024-0012 Palo Alto Networks / PAN-OS Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability 2024-11-18 9.3 past dueransomware
overdue 644d2024-12-05 CVE-2024-9465 Palo Alto Networks / Expedition Palo Alto Networks Expedition SQL Injection Vulnerability 2024-11-14 9.2 past due
overdue 644d2024-12-05 CVE-2024-9463 Palo Alto Networks / Expedition Palo Alto Networks Expedition OS Command Injection Vulnerability 2024-11-14 9.9 past due
overdue 651d2024-11-28 CVE-2024-5910 Palo Alto Networks / Expedition Palo Alto Networks Expedition Missing Authentication Vulnerability 2024-11-07 9.3 past due
overdue 874d2024-04-19 CVE-2024-3400 Palo Alto Networks / PAN-OS Palo Alto Networks PAN-OS Command Injection Vulnerability 2024-04-12 10.0 past dueransomware
overdue 1459d2022-09-12 CVE-2022-0028 Palo Alto Networks / PAN-OS Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability 2022-08-22 8.6 past due
overdue 1463d2022-09-08 CVE-2017-15944 Palo Alto Networks / PAN-OS Palo Alto Networks PAN-OS Remote Code Execution Vulnerability 2022-08-18 9.8 past due
overdue 1609d2022-04-15 CVE-2020-2021 Palo Alto Networks / PAN-OS Palo Alto Networks PAN-OS Authentication Bypass Vulnerability 2022-03-25 10.0 past dueransomware
overdue 1523d2022-07-10 CVE-2019-1579 Palo Alto Networks / PAN-OS Palo Alto Networks PAN-OS Remote Code Execution Vulnerability 2022-01-10 8.1 past dueransomware