---
title: "Palo Alto Networks: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/palo-alto-networks/
description: "Every Palo Alto Networks vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (12), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-10-14
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Palo Alto Networks: known exploited vulnerabilities

- 2026-10-14 [CVE-2026-0322](https://erroneo.us/security/cve/CVE-2026-0322/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Code Injection Vulnerability (due 2026-10-17; ransomware: Unknown)
- 2026-05-29 [CVE-2026-0257](https://erroneo.us/security/cve/CVE-2026-0257/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability (due 2026-06-01; ransomware: Known)
- 2026-05-06 [CVE-2026-0300](https://erroneo.us/security/cve/CVE-2026-0300/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability (due 2026-05-09; ransomware: Unknown)
- 2025-02-20 [CVE-2025-0111](https://erroneo.us/security/cve/CVE-2025-0111/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS File Read Vulnerability (due 2025-03-13; ransomware: Unknown)
- 2025-02-18 [CVE-2025-0108](https://erroneo.us/security/cve/CVE-2025-0108/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability (due 2025-03-11; ransomware: Unknown)
- 2024-12-30 [CVE-2024-3393](https://erroneo.us/security/cve/CVE-2024-3393/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability (due 2025-01-20; ransomware: Unknown)
- 2024-11-18 [CVE-2024-9474](https://erroneo.us/security/cve/CVE-2024-9474/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability (due 2024-12-09; ransomware: Known)
- 2024-11-18 [CVE-2024-0012](https://erroneo.us/security/cve/CVE-2024-0012/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability (due 2024-12-09; ransomware: Known)
- 2024-11-14 [CVE-2024-9465](https://erroneo.us/security/cve/CVE-2024-9465/index.md) Palo Alto Networks Expedition: Palo Alto Networks Expedition SQL Injection Vulnerability (due 2024-12-05; ransomware: Unknown)
- 2024-11-14 [CVE-2024-9463](https://erroneo.us/security/cve/CVE-2024-9463/index.md) Palo Alto Networks Expedition: Palo Alto Networks Expedition OS Command Injection Vulnerability (due 2024-12-05; ransomware: Unknown)
- 2024-11-07 [CVE-2024-5910](https://erroneo.us/security/cve/CVE-2024-5910/index.md) Palo Alto Networks Expedition: Palo Alto Networks Expedition Missing Authentication Vulnerability (due 2024-11-28; ransomware: Unknown)
- 2024-04-12 [CVE-2024-3400](https://erroneo.us/security/cve/CVE-2024-3400/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Command Injection Vulnerability (due 2024-04-19; ransomware: Known)

---
Source page: https://erroneo.us/security/vendor/palo-alto-networks/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt