paloaltonetworks security advisories
18 threat alerts tracking vulnerabilities and security advisories that affect paloaltonetworks products.
Vulnios monitors paloaltonetworks CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent paloaltonetworks security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2025-0107 — paloaltonetworks — expedition
An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclos
criticalCVE-2025-0107Critical Vulnerability: CVE-2026-45177 — paloaltonetworks — idira_secrets_manager_edge
Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control within its internal authentication components. A remote, unauthenticated attacker could exploit this by submitting
criticalCVE-2026-45177Critical Vulnerability: CVE-2021-3064 — paloaltonetworks — pan-os
A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potent
criticalCVE-2021-3064Critical Vulnerability: CVE-2021-3044 — paloaltonetworks — cortex_xsoar
An improper authorization vulnerability in Palo Alto Networks Cortex XSOAR enables a remote unauthenticated attacker with network access to the Cortex XSOAR server to perform unauthorized actions thro
criticalCVE-2021-3044Critical Vulnerability: CVE-2021-3033 — paloaltonetworks — prisma_cloud
An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud Compute console. This vulnerability enables an attacker to bypass signature validation d
criticalCVE-2021-3033Critical Vulnerability: CVE-2020-2040 — paloaltonetworks — pan-os
A buffer overflow vulnerability in PAN-OS allows an unauthenticated attacker to disrupt system processes and potentially execute arbitrary code with root privileges by sending a malicious request to t
criticalCVE-2020-2040Critical Vulnerability: CVE-2020-2018 — paloaltonetworks — pan-os
An authentication bypass vulnerability in the Panorama context switching feature allows an attacker with network access to a Panorama's management interface to gain privileged access to managed firewa
criticalCVE-2020-2018Critical Vulnerability: CVE-2019-17440 — paloaltonetworks — pan-os, pa-7050
Improper restriction of communications to Log Forwarding Card (LFC) on PA-7000 Series devices with second-generation Switch Management Card (SMC) may allow an attacker with network access to the LFC t
criticalCVE-2019-17440Critical Vulnerability: CVE-2019-1580 — paloaltonetworks — pan-os
Memory corruption in PAN-OS 7.1.24 and earlier, PAN-OS 8.0.19 and earlier, PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow a remote, unauthenticated user to craft a message to Secure
criticalCVE-2019-1580Critical Vulnerability: CVE-2019-1581 — paloaltonetworks — pan-os
A remote code execution vulnerability in the PAN-OS SSH device management interface that can lead to unauthenticated remote users with network access to the SSH management interface gaining root acces
criticalCVE-2019-1581Critical Vulnerability: CVE-2018-10143 — paloaltonetworks — expedition
The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/applicatio
criticalCVE-2018-10143Critical Vulnerability: CVE-2017-15940 — paloaltonetworks — pan-os
The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to
criticalCVE-2017-15940Critical Vulnerability: CVE-2017-9458 — paloaltonetworks — pan-os
XML external entity (XXE) vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x bef
criticalCVE-2017-9458Critical Vulnerability: CVE-2017-8390 — paloaltonetworks — pan-os
The DNS Proxy in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via a crafted domain name.
criticalCVE-2017-8390Critical Vulnerability: CVE-2017-7945 — paloaltonetworks — pan-os
The GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, 7.1.x before 7.1.9, and 8.x before 8.0.2 provides different error messages for failed login attempts
criticalCVE-2017-7945Critical Vulnerability: CVE-2016-9150 — paloaltonetworks — pan-os
Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 a
criticalCVE-2016-9150Critical Vulnerability: CVE-2016-3657 — paloaltonetworks — pan-os
Buffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to cause a denial of se
criticalCVE-2016-3657Critical Vulnerability: CVE-2016-3655 — paloaltonetworks — pan-os
The management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to execute arbitrary OS commands via a
criticalCVE-2016-3655
Track paloaltonetworks exposure across your environment
Vulnios automatically cross-references your asset inventory against new paloaltonetworks CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan