Skip to content

Known vulnerabilities in Palo Alto Networks PAN-OS

Is your version affected?

CVE Summary Score Published
CVE-2026-0300 Exploited Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability 9.3 Critical May 6, 2026
CVE-2025-0103 An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition… 9.2 Critical Jan 11, 2025
CVE-2024-0012 Exploited Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability 9.3 Critical Nov 18, 2024
CVE-2024-3400 Exploited Palo Alto Networks PAN-OS Command Injection Vulnerability 10.0 Critical Apr 12, 2024
CVE-2021-3064 A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that… 9.8 Critical Nov 10, 2021
CVE-2020-2040 A buffer overflow vulnerability in PAN-OS allows an unauthenticated attacker to disrupt system processes and potentially… 9.8 Critical Sep 9, 2020
CVE-2020-2021 Exploited Palo Alto Networks PAN-OS Authentication Bypass Vulnerability 10.0 Critical Jun 29, 2020
CVE-2020-2018 An authentication bypass vulnerability in the Panorama context switching feature allows an attacker with network… 9.0 Critical May 13, 2020
CVE-2019-17440 Improper restriction of communications to Log Forwarding Card (LFC) on PA-7000 Series devices with second-generation… 10.0 Critical Dec 20, 2019
CVE-2019-1581 A remote code execution vulnerability in the PAN-OS SSH device management interface that can lead to unauthenticated… 9.8 Critical Aug 23, 2019

Other Palo Alto Networks products