Cyberfeed6 › Vendors › Palo Alto Networks
CISA lists 16 Palo Alto Networks vulnerabilities as exploited in real attacks, and 6 of them are known to be used in ransomware campaigns. Most entries concern PAN-OS, Expedition.
Showing the 16 most recently added of 16. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2026-0322Palo Alto Networks PAN-OS Code Injection Vulnerability | PAN-OS | 2026-10-14 | High (8.6) | No | Vendor notice |
| CVE-2026-0257Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | PAN-OS | 2026-05-29 | High (7.8) | Yes | Vendor notice |
| CVE-2026-0300Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | PAN-OS | 2026-05-06 | Critical (9.3) | No | Vendor notice |
| CVE-2025-0111Palo Alto Networks PAN-OS File Read Vulnerability | PAN-OS | 2025-02-20 | High (7.1) | No | Vendor notice |
| CVE-2025-0108Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | PAN-OS | 2025-02-18 | High (8.8) | No | Vendor notice |
| CVE-2024-3393Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability | PAN-OS | 2024-12-30 | High (8.7) | No | Vendor notice |
| CVE-2024-9474Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | PAN-OS | 2024-11-18 | Medium (6.9) | Yes | Vendor notice |
| CVE-2024-0012Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability | PAN-OS | 2024-11-18 | Critical (9.3) | Yes | Vendor notice |
| CVE-2024-9465Palo Alto Networks Expedition SQL Injection Vulnerability | Expedition | 2024-11-14 | Critical (9.2) | No | Vendor notice |
| CVE-2024-9463Palo Alto Networks Expedition OS Command Injection Vulnerability | Expedition | 2024-11-14 | Critical (9.9) | No | Vendor notice |
| CVE-2024-5910Palo Alto Networks Expedition Missing Authentication Vulnerability | Expedition | 2024-11-07 | Critical (9.3) | No | Vendor notice |
| CVE-2024-3400Palo Alto Networks PAN-OS Command Injection Vulnerability | PAN-OS | 2024-04-12 | Critical (10.0) | Yes | Vendor notice |
| CVE-2022-0028Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability | PAN-OS | 2022-08-22 | High (8.6) | No | Vendor notice |
| CVE-2017-15944Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | PAN-OS | 2022-08-18 | Critical (9.8) | No | Vendor notice |
| CVE-2020-2021Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | PAN-OS | 2022-03-25 | Critical (10.0) | Yes | |
| CVE-2019-1579Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | PAN-OS | 2022-01-10 | High (8.1) | Yes |
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.