paloaltonetworks Vulnerability Advisory Catalog

Total 365 security vulnerabilities recorded for paloaltonetworks software and firmware.

← Back to All Vendors
Component: trust_protection_foundation

Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on r...

📅 2026-05-13
CVSS 7.2 Dossier →
Component: trust_protection_foundation

An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the serv...

📅 2026-05-13
CVSS 8.7 Dossier →
CVE-2026-0239 MEDIUM
Component: chronosphere_collector

An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with network access to the collector s...

📅 2026-05-13
CVSS 6.5 Dossier →
Component: broker_vm

A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields....

📅 2026-05-13
CVSS 3.2 Dossier →
Component: prisma_browser

A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing ...

📅 2026-05-13
CVSS 7.8 Dossier →
CVE-2026-0235 MEDIUM
Component: prisma_browser

A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data ...

📅 2026-05-13
CVSS 4.7 Dossier →
Component: pan-os

An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authen...

📅 2026-05-13
CVSS 8.1 Dossier →
CVE-2026-0264 CRITICAL
Component: pan-os

A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker wit...

📅 2026-05-13
CVSS 9.8 Dossier →
CVE-2026-0263 CRITICAL
Component: pan-os

A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to exe...

📅 2026-05-13
CVSS 9.8 Dossier →
Component: prisma_browser

An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal...

📅 2026-05-13
CVSS 7.8 Dossier →
CVE-2026-0300 CRITICAL
Component: pan-os

A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an una...

📅 2026-05-06
CVSS 9.8 Dossier →
CVE-2026-0234 CRITICAL
Component: cortex_xsiam

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Te...

📅 2026-04-13
CVSS 9.1 Dossier →
Component: autonomous_digital_experience_manager

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with ...

📅 2026-04-13
CVSS 8.8 Dossier →
CVE-2026-0232 MEDIUM
Component: cortex_xdr_agent

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent....

📅 2026-04-13
CVSS 4.4 Dossier →
Component: pan-os

A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated...

📅 2026-01-15
CVSS 7.5 Dossier →
Component: pan-os

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated adm...

📅 2025-10-09
CVSS 7.2 Dossier →
Component: pan-os

An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users ...

📅 2025-10-09
CVSS 2.7 Dossier →
Component: globalprotect

An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect...

📅 2025-06-13
CVSS 3.5 Dossier →
Component: globalprotect

An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on macOS allows a non adm...

📅 2025-06-13
CVSS 8.8 Dossier →
Component: pan-os

A command injection vulnerability in Palo Alto Networks PAN-OS® enables an authenticated administrative user to perform actions as the root user. The...

📅 2025-06-13
CVSS 7.2 Dossier →
Component: globalprotect

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non admi...

📅 2025-05-14
CVSS 3.3 Dossier →
Component: pan-os

A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated attacker to send a burst...

📅 2025-05-14
CVSS 7.5 Dossier →
Component: pan-os

An authenticated file deletion vulnerability in the Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to the m...

📅 2025-04-11
CVSS 3.8 Dossier →
Component: globalprotect

A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated n...

📅 2025-04-11
CVSS 7.0 Dossier →
Page 3 of 16 (365 Total Records)