Vulnerabilities

Vulnerabilities affecting firewalls and security appliances, with vendor fix data, CISA KEV status and EPSS.

Intelligence updated 30 Sept 2026 at 12:52 UTC

46 vulnerabilities

CVE-2024-255114 Nov 2024
PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet
High7.5CVSS 3.1, High0.48%
CVE-2024-94689 Oct 2024
PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet
High7.5CVSS 3.1, High0.41%
CVE-2024-9465KEV9 Oct 2024
Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure
Critical9.1CVSS 3.1, Critical100%
CVE-2024-9463KEV9 Oct 2024
Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
High7.5CVSS 3.1, High99%
CVE-2024-869111 Sept 2024
PAN-OS: User Impersonation in GlobalProtect Portal
High7.1CVSS 3.1, High0.32%
CVE-2024-868711 Sept 2024
PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes
High7.1CVSS 3.1, High0.41%
CVE-2024-868611 Sept 2024
PAN-OS: Command Injection Vulnerability
High7.2CVSS 3.1, High1%
CVE-2024-5910KEV10 Jul 2024
Expedition: Missing Authentication Leads to Admin Account Takeover
Critical9.8CVSS 3.1, Critical92%
CVE-2024-3400KEVRansomware12 Apr 2024
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
Critical10CVSS 3.1, Critical100%
CVE-2024-338510 Apr 2024
PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled
High7.5CVSS 3.1, High0.91%
CVE-2024-338410 Apr 2024
PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets
High7.5CVSS 3.1, High0.89%
CVE-2024-338310 Apr 2024
PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)
Critical9.1CVSS 3.1, Critical0.58%
CVE-2024-338210 Apr 2024
PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets
High7.5CVSS 3.1, High0.93%
CVE-2024-000814 Feb 2024
PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface
High8.8CVSS 3.1, High0.50%
CVE-2022-0028KEV10 Aug 2022
PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering
High8.6CVSS 3.1, High2%
CVE-2020-2021KEVRansomware29 Jun 2020
PAN-OS: Authentication Bypass in SAML Authentication
Critical10CVSS 3.1, Critical4%