EN
DeutschEnglishEspañolFrançaisItaliano

Start free Dashboard

Exploited vulnerabilities

Palo Alto Networks

16 Palo Alto Networks vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue16
Last 12 months3
In ransomware campaigns6
Last addition14 October 2026

The vulnerabilities16

  1. 14 October 2026CVE-2026-0322PAN-OSPalo Alto Networks PAN-OS Code Injection Vulnerability
  2. 29 May 2026CVE-2026-0257PAN-OSPalo Alto Networks PAN-OS Authentication Bypass VulnerabilityRansomware
  3. 6 May 2026CVE-2026-0300PAN-OSPalo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
  4. 20 February 2025CVE-2025-0111PAN-OSPalo Alto Networks PAN-OS File Read Vulnerability
  5. 18 February 2025CVE-2025-0108PAN-OSPalo Alto Networks PAN-OS Authentication Bypass Vulnerability
  6. 30 December 2024CVE-2024-3393PAN-OSPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
  7. 18 November 2024CVE-2024-9474PAN-OSPalo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityRansomware
  8. 18 November 2024CVE-2024-0012PAN-OSPalo Alto Networks PAN-OS Management Interface Authentication Bypass VulnerabilityRansomware
  9. 14 November 2024CVE-2024-9465ExpeditionPalo Alto Networks Expedition SQL Injection Vulnerability
  10. 14 November 2024CVE-2024-9463ExpeditionPalo Alto Networks Expedition OS Command Injection Vulnerability
  11. 7 November 2024CVE-2024-5910ExpeditionPalo Alto Networks Expedition Missing Authentication Vulnerability
  12. 12 April 2024CVE-2024-3400PAN-OSPalo Alto Networks PAN-OS Command Injection VulnerabilityRansomware
  13. 22 August 2022CVE-2022-0028PAN-OSPalo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
  14. 18 August 2022CVE-2017-15944PAN-OSPalo Alto Networks PAN-OS Remote Code Execution Vulnerability
  15. 25 March 2022CVE-2020-2021PAN-OSPalo Alto Networks PAN-OS Authentication Bypass VulnerabilityRansomware
  16. 10 January 2022CVE-2019-1579PAN-OSPalo Alto Networks PAN-OS Remote Code Execution VulnerabilityRansomware

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, Palo Alto Networks included.

Start freeMy Defence

All vendorsThe catalogue on the CISA website