# Palo Alto Networks PAN-OS vulnerabilities Source: https://junglewise.ai/threats/technologies/pan-os Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/pan-os.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 22 vulnerabilities in Palo Alto Networks PAN-OS: 6 in the last 7 days and 13 in the last 90 days, 10 of them critical and 10 exploited in the wild. The most recent, CVE-2026-0331, was published on 11 November 2026. 7 vulnerabilities in the last four weeks, up from none in the four before. 1 critical against 0, 1 exploited in the wild against 0. ## Counts - Last 7 days: 6 - Last 30 days: 13 - Last 90 days: 13 - All time: 22 (10 critical, 10 exploited in the wild) ## About Palo Alto Networks PAN-OS Operating system that runs on Palo Alto Networks firewall and security appliances. ## Latest Palo Alto Networks PAN-OS vulnerabilities - [CVE-2026-0331: Palo Alto Networks PAN-OS information disclosure via dataplane interface](https://junglewise.ai/threats/cve-2026-0331-an-information-disclosure-vulnerability-in-palo-alto-networks-pan) (info, published 11 Nov 2026) - [CVE-2026-0329: Palo Alto Networks PAN-OS buffer overflow denial of service](https://junglewise.ai/threats/cve-2026-0329-a-buffer-overflow-vulnerability-in-palo-alto-networks-pan-os) (info, published 11 Nov 2026) - [CVE-2026-0328: Palo Alto Networks PAN-OS authentication bypass in GlobalProtect](https://junglewise.ai/threats/cve-2026-0328-authentication-bypass-vulnerabilities-in-the-globalprotect-portal) (info, published 11 Nov 2026) - [CVE-2026-0327: Palo Alto Networks PAN-OS privilege escalation in GlobalProtect](https://junglewise.ai/threats/cve-2026-0327-a-privilege-escalation-vulnerability-in-the-globalprotect-gateway) (info, published 11 Nov 2026) - [CVE-2026-0326: Palo Alto Networks PAN-OS buffer overflow in protocol and service processing](https://junglewise.ai/threats/cve-2026-0326-a-buffer-overflow-vulnerability-in-palo-alto-networks-pan-os) (info, published 11 Nov 2026) - [CVE-2026-0325: Palo Alto Networks PAN-OS GlobalProtect authorization bypass](https://junglewise.ai/threats/cve-2026-0325-an-authorization-bypass-vulnerability-in-the-globalprotect-gateway) (info, published 11 Nov 2026) - [CVE-2026-0320: Palo Alto Networks PAN-OS authenticated admin command injection](https://junglewise.ai/threats/cve-2026-0320-a-command-injection-vulnerability-in-palo-alto-networks-pan-os) (info, published 14 Oct 2026) - [CVE-2026-0319: Palo Alto Networks PAN-OS GlobalProtect session hijacking](https://junglewise.ai/threats/cve-2026-0319-an-improper-input-handling-vulnerability-in-the-globalprotect) (info, published 14 Oct 2026) - [CVE-2026-0318: Palo Alto Networks PAN-OS stack-based buffer overflow on Panorama](https://junglewise.ai/threats/cve-2026-0318-a-stack-based-buffer-overflow-vulnerability-in-the-log-processing) (info, published 14 Oct 2026) - [CVE-2026-0317: Palo Alto Networks PAN-OS denial of service in API request handler](https://junglewise.ai/threats/cve-2026-0317-a-denial-of-service-vulnerability-in-palo-alto-networks-pan-os) (info, published 14 Oct 2026) - [CVE-2026-0316: Palo Alto Networks PAN-OS stored XSS in web interface](https://junglewise.ai/threats/cve-2026-0316-a-stored-cross-site-scripting-xss-vulnerability-in-palo-alto) (info, published 14 Oct 2026) - [CVE-2026-0321: Palo Alto Networks PAN-OS denial of service in network services](https://junglewise.ai/threats/cve-2026-0321-denial-of-service-vulnerabilities-in-palo-alto-networks-pan-os) (info, published 14 Oct 2026) - [CVE-2026-0322: Palo Alto Networks PAN-OS code injection vulnerability](https://junglewise.ai/threats/cve-2026-0322-palo-alto-networks-pan-os-code-injection-vulnerability) (critical, exploited in the wild, CVSS 7.2, published 14 Oct 2026) - [CVE-2025-0111: Palo Alto Networks PAN-OS File Read Vulnerability](https://junglewise.ai/threats/cve-2025-0111-palo-alto-networks-pan-os-file-read-vulnerability) (critical, exploited in the wild, CVSS 7.1, published 20 Feb 2025) - [CVE-2025-0108: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2025-0108-palo-alto-networks-pan-os-authentication-bypass-vulnerability) (critical, exploited in the wild, CVSS 9.1, published 18 Feb 2025) - [CVE-2024-3393: Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability](https://junglewise.ai/threats/cve-2024-3393-palo-alto-networks-pan-os-malicious-dns-packet-vulnerability) (critical, exploited in the wild, CVSS 8.7, published 30 Dec 2024) - [CVE-2024-0012: Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2024-0012-palo-alto-networks-pan-os-management-interface-authentication) (critical, exploited in the wild, CVSS 9.8, published 18 Nov 2024) - [CVE-2024-9474: Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-9474-palo-alto-networks-pan-os-management-interface-os-command) (critical, exploited in the wild, CVSS 7.2, published 18 Nov 2024) - [CVE-2024-3400: Palo Alto Networks PAN-OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-3400-palo-alto-networks-pan-os-command-injection-vulnerability) (critical, exploited in the wild, CVSS 10, published 12 Apr 2024) - [CVE-2022-0028: Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2022-0028-palo-alto-networks-pan-os-reflected-amplification-denial-of) (critical, exploited in the wild, CVSS 8.6, published 22 Aug 2022) - [CVE-2017-15944: Palo Alto Networks PAN-OS Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-15944-palo-alto-networks-pan-os-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 18 Aug 2022) - [CVE-2020-2021: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2020-2021-palo-alto-networks-pan-os-authentication-bypass-vulnerability) (critical, exploited in the wild, CVSS 10, published 25 Mar 2022) ## Most severe Palo Alto Networks PAN-OS vulnerabilities - [CVE-2024-3400: Palo Alto Networks PAN-OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-3400-palo-alto-networks-pan-os-command-injection-vulnerability) (critical, exploited in the wild, CVSS 10, published 12 Apr 2024) - [CVE-2020-2021: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2020-2021-palo-alto-networks-pan-os-authentication-bypass-vulnerability) (critical, exploited in the wild, CVSS 10, published 25 Mar 2022) - [CVE-2024-0012: Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2024-0012-palo-alto-networks-pan-os-management-interface-authentication) (critical, exploited in the wild, CVSS 9.8, published 18 Nov 2024) - [CVE-2017-15944: Palo Alto Networks PAN-OS Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-15944-palo-alto-networks-pan-os-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 18 Aug 2022) - [CVE-2025-0108: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2025-0108-palo-alto-networks-pan-os-authentication-bypass-vulnerability) (critical, exploited in the wild, CVSS 9.1, published 18 Feb 2025) - [CVE-2024-3393: Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability](https://junglewise.ai/threats/cve-2024-3393-palo-alto-networks-pan-os-malicious-dns-packet-vulnerability) (critical, exploited in the wild, CVSS 8.7, published 30 Dec 2024) - [CVE-2022-0028: Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2022-0028-palo-alto-networks-pan-os-reflected-amplification-denial-of) (critical, exploited in the wild, CVSS 8.6, published 22 Aug 2022) - [CVE-2026-0322: Palo Alto Networks PAN-OS code injection vulnerability](https://junglewise.ai/threats/cve-2026-0322-palo-alto-networks-pan-os-code-injection-vulnerability) (critical, exploited in the wild, CVSS 7.2, published 14 Oct 2026) - [CVE-2024-9474: Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-9474-palo-alto-networks-pan-os-management-interface-os-command) (critical, exploited in the wild, CVSS 7.2, published 18 Nov 2024) - [CVE-2025-0111: Palo Alto Networks PAN-OS File Read Vulnerability](https://junglewise.ai/threats/cve-2025-0111-palo-alto-networks-pan-os-file-read-vulnerability) (critical, exploited in the wild, CVSS 7.1, published 20 Feb 2025) ## Vulnerabilities per week 7 vulnerabilities in the last four weeks, up from none in the four before. 1 critical against 0, 1 exploited in the wild against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 7 | 1 | 1 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 6 | 0 | 0 | ## Other Palo Alto Networks technologies - [Palo Alto Networks Prisma Access](https://junglewise.ai/threats/technologies/prisma-access): 13 vulnerabilities - [Palo Alto Networks Prisma Access Agent](https://junglewise.ai/threats/technologies/prisma-access-agent): 10 vulnerabilities - [Palo Alto Networks Panorama](https://junglewise.ai/threats/technologies/panorama): 6 vulnerabilities - [Palo Alto Networks GlobalProtect App](https://junglewise.ai/threats/technologies/globalprotect-app): 4 vulnerabilities - [Palo Alto Networks Prisma Browser](https://junglewise.ai/threats/technologies/prisma-browser): 4 vulnerabilities - [Palo Alto Networks Checkov by Prisma Cloud](https://junglewise.ai/threats/technologies/checkov-by-prisma-cloud): 3 vulnerabilities - [Palo Alto Networks Cloud NGFW](https://junglewise.ai/threats/technologies/cloud-ngfw): 3 vulnerabilities - [Palo Alto Networks Expedition](https://junglewise.ai/threats/technologies/expedition): 3 vulnerabilities - [Palo Alto Networks Trust Protection Foundation](https://junglewise.ai/threats/technologies/trust-protection-foundation): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Palo Alto Networks PAN-OS vulnerabilities", https://junglewise.ai/threats/technologies/pan-os, 12 November 2026.