Product by Palo Alto Networks
Palo Alto Networks PAN-OS
238 known vulnerabilities in Palo Alto Networks PAN-OS (Palo Alto Networks), 15 of them actively exploited (CISA KEV).
Key figures
238
Vulnerabilities
15
Actively exploited (KEV)
6
Used by ransomware
37
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-0257 | PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities In CISA KEVRansomwarealso in 4 other products | 9.1 | |
| Critical | CVE-2024-0012 | PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) In CISA KEVRansomwarealso in 1 other product | 9.8 | |
| Critical | CVE-2024-3400 | PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect In CISA KEVRansomwarealso in 1 other product | 10.0 | |
| Critical | CVE-2024-9474 | PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface In CISA KEVRansomwarealso in 1 other product | 7.2 | |
| Critical | CVE-2019-1579 | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability In CISA KEVRansomware | 8.1 | |
| Critical | CVE-2026-0300 | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability In CISA KEValso in 2 other products | 9.8 | |
| Critical | CVE-2020-2021 | PAN-OS: Authentication Bypass in SAML Authentication In CISA KEVRansomwarealso in 1 other product | 10.0 | |
| Critical | CVE-2025-0108 | PAN-OS: Authentication Bypass in the Management Web Interface In CISA KEValso in 1 other product | 9.1 | |
| Critical | CVE-2017-15944 | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2024-3393 | PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet In CISA KEValso in 2 other products | 7.5 | |
| Critical | CVE-2016-5195 | Linux Kernel Race Condition Vulnerability In CISA KEValso in 17 other products | 7.0 | |
| Critical | CVE-2018-14634 | Linux Kernel Integer Overflow Vulnerability In CISA KEValso in 28 other products | 7.8 | |
| Critical | CVE-2026-0322 | PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface In CISA KEValso in 6 other products | 7.2 | |
| Critical | CVE-2022-0028 | PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering In CISA KEValso in 1 other product | 8.6 | |
| Critical | CVE-2025-0111 | PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface In CISA KEValso in 1 other product | 6.5 | |
| Critical | CVE-2026-109618 | RCE via OOM corruption | 9.8 | |
| Critical | CVE-2026-109619 | RCE via stale global state | 8.1 | |
| Critical | CVE-2016-9150 | Palo Alto Networks PAN-OS: Buffer Overflow | 9.8 | |
| Critical | CVE-2021-3064 | PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces | 9.8 | |
| High | CVE-2016-4971 | GNU Wget: security vulnerability | 8.8 | |
| High | CVE-2020-2036 | PAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interface | 8.8 | |
| Critical | CVE-2017-8390 | Palo Alto Networks PAN-OS: Code Execution | 9.8 | |
| High | CVE-2021-3060 | PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP) | 8.1 | |
| Critical | CVE-2017-15940 | Palo Alto Networks PAN-OS: Code Execution | 9.8 | |
| Critical | CVE-2016-3657 | Palo Alto Networks PAN-OS: Buffer Overflow | 9.8 |
News
- PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malwarethehackernews,
- PHP2Shell exposes the weakness in coordinated vulnerability disclosurecsoonline,
- Neutralizing PHP2Shell: Stopping Critical PHP RCEs with VMware vDefend and Avi WAFvmware-security,
- Two critical PHP flaws put the web on alert as emergency patches arrivecsoonline,
- PHP2Shell Patches Land as First Exploitation Attempts Hit Sensorssecurityweek,
- PHP ships emergency patches for critical PHP2Shell flawsbleepingcomputer,