Public catalog
Vulnerabilities
Explore the vulnerabilities Patcharo tracks and find the ones that concern your technologies.
Intelligence updated 1 Oct 2026 at 13:38 UTC
Identifiers, titles, summaries, vendors and products of the whole published catalog; the results follow as you type.
48 vulnerabilities · sorted by Publication date — newest first
31–48 of 48
PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh7.5Known exploitationNone knownEPSS0.48%PublishedFix statedPAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh7.5Known exploitationNone knownEPSS0.41%PublishedFix statedExpedition: SQL Injection Leads to Firewall Admin Credential Disclosure
Palo Alto NetworksPalo Alto Networks Expedition
Severity · CVSSCritical9.1Known exploitationKEVDue 5 Dec 2024EPSS100%PublishedFix statedPalo Alto NetworksPalo Alto Networks Expedition
Severity · CVSSHigh7.5Known exploitationKEVDue 5 Dec 2024EPSS99%PublishedFix statedPAN-OS: User Impersonation in GlobalProtect Portal
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh7.1Known exploitationNone knownEPSS0.32%PublishedFix statedPAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes
Palo Alto NetworksPalo Alto Networks PAN-OS, Palo Alto Networks GlobalProtect App, Palo Alto Networks Prisma Access
Severity · CVSSHigh7.1Known exploitationNone knownEPSS0.41%PublishedFix statedPAN-OS: Command Injection Vulnerability
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh7.2Known exploitationNone knownEPSS1%PublishedNo fix statedExpedition: Missing Authentication Leads to Admin Account Takeover
Palo Alto NetworksPalo Alto Networks Expedition
Severity · CVSSCritical9.8Known exploitationKEVDue 28 Nov 2024EPSS92%PublishedFix statedPAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSCritical10Known exploitationKEVRansomwareDue 19 Apr 2024EPSS100%PublishedFix statedPAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh7.5Known exploitationNone knownEPSS0.91%PublishedFix statedPAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh7.5Known exploitationNone knownEPSS0.89%PublishedFix statedPAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSCritical9.1Known exploitationNone knownEPSS0.58%PublishedFix statedPAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh7.5Known exploitationNone knownEPSS0.93%PublishedFix statedPAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh8.8Known exploitationNone knownEPSS0.50%PublishedFix statedPAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh8.6Known exploitationKEVDue 12 Sept 2022EPSS2%PublishedFix statedPAN-OS: Authentication Bypass in SAML Authentication
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSCritical10Known exploitationKEVRansomwareDue 15 Apr 2022EPSS4%PublishedFix statedPalo Alto Networks PAN-OS Remote Code Execution Vulnerability
Palo Alto NetworksPalo Alto Networks GlobalProtect Portal/Gateway Interface
Severity · CVSSHigh8.1Known exploitationKEVRansomwareDue 10 Jul 2022EPSS46%PublishedNo fix statedPalo Alto Networks PAN-OS Remote Code Execution Vulnerability
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSCritical9.8Known exploitationKEVDue 8 Sept 2022EPSS98%PublishedNo fix stated