Security Digest
Palo Alto Networks: known exploited vulnerabilities
12 Palo Alto Networks CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-10-14 | CVE-2026-0322 | Palo Alto Networks PAN-OS Palo Alto Networks PAN-OS Code Injection Vulnerability | 2026-10-17 |
| 2026-05-29 | CVE-2026-0257 | Palo Alto Networks PAN-OS Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Ransomware | 2026-06-01 |
| 2026-05-06 | CVE-2026-0300 | Palo Alto Networks PAN-OS Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | 2026-05-09 |
| 2025-02-20 | CVE-2025-0111 | Palo Alto Networks PAN-OS Palo Alto Networks PAN-OS File Read Vulnerability | 2025-03-13 |
| 2025-02-18 | CVE-2025-0108 | Palo Alto Networks PAN-OS Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 2025-03-11 |
| 2024-12-30 | CVE-2024-3393 | Palo Alto Networks PAN-OS Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability | 2025-01-20 |
| 2024-11-18 | CVE-2024-9474 | Palo Alto Networks PAN-OS Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability Ransomware | 2024-12-09 |
| 2024-11-18 | CVE-2024-0012 | Palo Alto Networks PAN-OS Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability Ransomware | 2024-12-09 |
| 2024-11-14 | CVE-2024-9465 | Palo Alto Networks Expedition Palo Alto Networks Expedition SQL Injection Vulnerability | 2024-12-05 |
| 2024-11-14 | CVE-2024-9463 | Palo Alto Networks Expedition Palo Alto Networks Expedition OS Command Injection Vulnerability | 2024-12-05 |
| 2024-11-07 | CVE-2024-5910 | Palo Alto Networks Expedition Palo Alto Networks Expedition Missing Authentication Vulnerability | 2024-11-28 |
| 2024-04-12 | CVE-2024-3400 | Palo Alto Networks PAN-OS Palo Alto Networks PAN-OS Command Injection Vulnerability Ransomware | 2024-04-19 |