Skip to content
Patcharo

Public catalog

Vulnerabilities

Explore the vulnerabilities Patcharo tracks and find the ones that concern your technologies.

Intelligence updated 1 Oct 2026 at 13:38 UTC

Identifiers, titles, summaries, vendors and products of the whole published catalog; the results follow as you type.

Active criteria

48 vulnerabilities · sorted by Publication date — newest first

1–30 of 48

  1. CVE-2026-0301

    PAN-OS: Information Disclosure Vulnerability in URL Filtering

    Palo Alto NetworksPalo Alto Networks PAN-OS, Palo Alto Networks Cloud NGFW, Palo Alto Networks Prisma Access

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.32%
    PublishedFix stated
  2. CVE-2026-0280

    PAN-OS: IPv6 Firewall Policy Bypass

    Palo Alto NetworksPalo Alto Networks PAN-OS, Palo Alto Networks Prisma Access

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.34%
    PublishedFix stated
  3. CVE-2026-0281

    PAN-OS: Information Disclosure Vulnerability in Management Web Interface

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh7.1
    Known exploitationNone known
    EPSS0.28%
    PublishedFix stated
  4. CVE-2026-0283

    PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.38%
    PublishedFix stated
  5. CVE-2026-0284

    PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSCritical9.9
    Known exploitationNone known
    EPSS0.47%
    PublishedFix stated
  6. CVE-2026-0286

    PAN-OS: Authenticated Command Injection in CLI

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS2%
    PublishedFix stated
  7. CVE-2026-0287

    PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing

    Palo Alto NetworksPalo Alto Networks PAN-OS, Palo Alto Networks Cloud NGFW, Palo Alto Networks Prisma Access

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.62%
    PublishedFix stated
  8. CVE-2026-0288

    PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent

    Palo Alto NetworksPalo Alto Networks PAN-OS, Palo Alto Networks Cloud NGFW, Palo Alto Networks Prisma Access

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.83%
    PublishedFix stated
  9. CVE-2026-0273

    PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS1%
    PublishedFix stated
  10. CVE-2026-0272

    PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.26%
    PublishedFix stated
  11. CVE-2026-0257

    PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

    Palo Alto NetworksPalo Alto Networks PAN-OS, Palo Alto Networks Prisma Access

    Severity · CVSSCritical9.1
    Known exploitationKEVRansomwareDue 1 Jun 2026
    EPSS96%
    PublishedFix stated
  12. CVE-2026-0258

    PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSCritical9.1
    Known exploitationNone known
    EPSS0.33%
    PublishedFix stated
  13. CVE-2026-0259

    WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)

    Palo Alto NetworksPalo Alto Networks WildFire WF-500 and WF-500-B

    Severity · CVSSHigh8.8
    Known exploitationNone known
    EPSS0.34%
    PublishedFix stated
  14. CVE-2026-0261

    PAN-OS: Authenticated Admin Command Injection Vulnerability

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS1%
    PublishedFix stated
  15. CVE-2026-0262

    PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing

    Palo Alto NetworksPalo Alto Networks PAN-OS, Palo Alto Networks Prisma Access

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.36%
    PublishedFix stated
  16. CVE-2026-0263

    PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSCritical9.8
    Known exploitationNone known
    EPSS0.37%
    PublishedFix stated
  17. CVE-2026-0264

    PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSCritical9.8
    Known exploitationNone known
    EPSS0.47%
    PublishedFix stated
  18. CVE-2026-0265

    PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh8.1
    Known exploitationNone known
    EPSS1%
    PublishedFix stated
  19. CVE-2026-0300

    PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSCritical9.8
    Known exploitationKEVDue 9 May 2026
    EPSS32%
    PublishedFix stated
  20. CVE-2026-0227

    PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal

    Palo Alto NetworksPalo Alto Networks PAN-OS, Palo Alto Networks Prisma Access

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.75%
    PublishedFix stated
  21. CVE-2025-4615

    PAN-OS: Improper Neutralization of Input in the Management Web Interface

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.79%
    PublishedFix stated
  22. CVE-2025-4231

    PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web Interface

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.98%
    PublishedFix stated
  23. CVE-2025-0130

    PAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted Packets

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.42%
    PublishedFix stated
  24. CVE-2025-0114

    PAN-OS: Denial of Service (DoS) in GlobalProtect

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.41%
    PublishedFix stated
  25. CVE-2025-0111

    PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSMedium6.5
    Known exploitationKEVDue 13 Mar 2025
    EPSS2%
    PublishedFix stated
  26. CVE-2025-0108

    PAN-OS: Authentication Bypass in the Management Web Interface

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSCritical9.1
    Known exploitationKEVDue 11 Mar 2025
    EPSS98%
    PublishedFix stated
  27. CVE-2024-3393

    PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh7.5
    Known exploitationKEVDue 20 Jan 2025
    EPSS28%
    PublishedFix stated
  28. CVE-2024-9474

    PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh7.2
    Known exploitationKEVRansomwareDue 9 Dec 2024
    EPSS95%
    PublishedFix stated
  29. CVE-2024-0012

    PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSCritical9.8
    Known exploitationKEVRansomwareDue 9 Dec 2024
    EPSS100%
    PublishedFix stated
  30. CVE-2024-2550

    PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.51%
    PublishedFix stated