{"schema_version":1,"title":"Palo Alto Networks vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 46 vulnerabilities in Palo Alto Networks: 0 in the last 7 days and 17 in the last 90 days, 2 of them critical and 1 exploited in the wild. The most recent, CVE-2026-0304, was published on 10 September 2026. 6 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/palo-alto-networks","json_url":"https://junglewise.ai/threats/vendors/palo-alto-networks.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/palo-alto-networks","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":11,"all_time":46,"critical":2,"exploited":1,"last_7_days":0,"last_30_days":7,"last_90_days":17,"last_365_days":46},"latest":[{"cve":"CVE-2026-0304","cvss":4.8,"epss":0.0022,"slug":"cve-2026-0304-palo-alto-networks-cortex-xdr-broker-vm-privilege-escalation","title":"Palo Alto Networks Cortex XDR Broker VM privilege escalation","severity":"info","exploited":false,"published_at":"2026-09-10T07:17:02.47+00:00","url":"https://junglewise.ai/threats/cve-2026-0304-palo-alto-networks-cortex-xdr-broker-vm-privilege-escalation"},{"cve":"CVE-2026-0303","cvss":2.4,"epss":0.0019,"slug":"cve-2026-0303-palo-alto-networks-checkov-arbitrary-code-execution-via-auto","title":"Palo Alto Networks Checkov arbitrary code execution via auto-loaded configuration","severity":"info","exploited":false,"published_at":"2026-09-10T07:17:02.14+00:00","url":"https://junglewise.ai/threats/cve-2026-0303-palo-alto-networks-checkov-arbitrary-code-execution-via-auto"},{"cve":"CVE-2026-0302","cvss":4.7,"epss":0.0082,"slug":"cve-2026-0302-palo-alto-networks-checkov-os-command-injection","title":"Palo Alto Networks Checkov OS command injection","severity":"info","exploited":false,"published_at":"2026-09-10T07:17:00.843+00:00","url":"https://junglewise.ai/threats/cve-2026-0302-palo-alto-networks-checkov-os-command-injection"},{"cve":"CVE-2026-0310","cvss":7.2,"epss":0.0037,"slug":"cve-2026-0310-palo-alto-networks-pan-os-buffer-overflow-in-xml-processing","title":"Palo Alto Networks PAN-OS buffer overflow in XML processing","severity":"info","exploited":false,"published_at":"2026-09-10T06:17:04.45+00:00","url":"https://junglewise.ai/threats/cve-2026-0310-palo-alto-networks-pan-os-buffer-overflow-in-xml-processing"},{"cve":"CVE-2026-0308","cvss":4.8,"epss":0.0027,"slug":"cve-2026-0308-palo-alto-networks-pan-os-stored-xss-in-web-interface","title":"Palo Alto Networks PAN-OS stored XSS in web interface","severity":"info","exploited":false,"published_at":"2026-09-10T06:17:03.513+00:00","url":"https://junglewise.ai/threats/cve-2026-0308-palo-alto-networks-pan-os-stored-xss-in-web-interface"},{"cve":"CVE-2026-0306","cvss":5.8,"epss":0.0011,"slug":"cve-2026-0306-palo-alto-networks-prisma-access-agent-dlp-bypass-on-windows","title":"Palo Alto Networks Prisma Access Agent DLP bypass on Windows","severity":"info","exploited":false,"published_at":"2026-09-10T06:17:03.007+00:00","url":"https://junglewise.ai/threats/cve-2026-0306-palo-alto-networks-prisma-access-agent-dlp-bypass-on-windows"},{"cve":"CVE-2026-0305","cvss":4.3,"epss":0.001,"slug":"cve-2026-0305-palo-alto-networks-prisma-access-agent-information-disclosure-on","title":"Palo Alto Networks Prisma Access Agent information disclosure on Linux","severity":"info","exploited":false,"published_at":"2026-09-10T06:17:02.733+00:00","url":"https://junglewise.ai/threats/cve-2026-0305-palo-alto-networks-prisma-access-agent-information-disclosure-on"},{"cve":"CVE-2026-0278","cvss":5.8,"slug":"cve-2026-0278-palo-alto-networks-prisma-access-agent-dlp-bypass-on-windows","title":"Palo Alto Networks Prisma Access Agent DLP bypass on Windows","severity":"info","exploited":false,"published_at":"2026-07-09T20:16:24.983+00:00","url":"https://junglewise.ai/threats/cve-2026-0278-palo-alto-networks-prisma-access-agent-dlp-bypass-on-windows"},{"cve":"CVE-2026-0277","cvss":5.7,"slug":"cve-2026-0277-palo-alto-networks-prisma-access-agent-improper-certificate","title":"Palo Alto Networks Prisma Access Agent improper certificate validation in iOS","severity":"info","exploited":false,"published_at":"2026-07-09T20:16:24.84+00:00","url":"https://junglewise.ai/threats/cve-2026-0277-palo-alto-networks-prisma-access-agent-improper-certificate"},{"cve":"CVE-2026-0276","cvss":4.8,"slug":"cve-2026-0276-palo-alto-networks-cortex-xdr-broker-vm-privilege-escalation","title":"Palo Alto Networks Cortex XDR Broker VM privilege escalation","severity":"info","exploited":false,"published_at":"2026-07-09T20:16:24.67+00:00","url":"https://junglewise.ai/threats/cve-2026-0276-palo-alto-networks-cortex-xdr-broker-vm-privilege-escalation"},{"cve":"CVE-2026-0275","cvss":7.2,"slug":"cve-2026-0275-palo-alto-networks-prisma-browser-privilege-escalation-in-macos","title":"Palo Alto Networks Prisma Browser privilege escalation in macOS","severity":"info","exploited":false,"published_at":"2026-07-09T20:16:24.537+00:00","url":"https://junglewise.ai/threats/cve-2026-0275-palo-alto-networks-prisma-browser-privilege-escalation-in-macos"},{"cve":"CVE-2026-0287","cvss":6.6,"slug":"cve-2026-0287-palo-alto-networks-pan-os-denial-of-service-in-network-traffic","title":"Palo Alto Networks PAN-OS denial of service in network traffic processing","severity":"info","exploited":false,"published_at":"2026-07-09T19:17:02.747+00:00","url":"https://junglewise.ai/threats/cve-2026-0287-palo-alto-networks-pan-os-denial-of-service-in-network-traffic"},{"cve":"CVE-2026-0282","cvss":2.7,"slug":"cve-2026-0282-palo-alto-networks-pan-os-file-deletion-in-management-web","title":"Palo Alto Networks PAN-OS file deletion in management web interface","severity":"info","exploited":false,"published_at":"2026-07-09T19:17:00.11+00:00","url":"https://junglewise.ai/threats/cve-2026-0282-palo-alto-networks-pan-os-file-deletion-in-management-web"},{"cve":"CVE-2026-0281","cvss":2.1,"slug":"cve-2026-0281-palo-alto-networks-pan-os-information-disclosure-in-management-web","title":"Palo Alto Networks PAN-OS information disclosure in management web interface","severity":"info","exploited":false,"published_at":"2026-07-09T19:16:59.78+00:00","url":"https://junglewise.ai/threats/cve-2026-0281-palo-alto-networks-pan-os-information-disclosure-in-management-web"},{"cve":"CVE-2026-0280","cvss":1.7,"slug":"cve-2026-0280-palo-alto-networks-pan-os-ipv6-security-policy-bypass-in-dataplane","title":"Palo Alto Networks PAN-OS IPv6 security policy bypass in dataplane","severity":"info","exploited":false,"published_at":"2026-07-09T19:16:59.28+00:00","url":"https://junglewise.ai/threats/cve-2026-0280-palo-alto-networks-pan-os-ipv6-security-policy-bypass-in-dataplane"},{"cve":"CVE-2026-0279","cvss":5.3,"slug":"cve-2026-0279-palo-alto-networks-pan-os-xss-in-globalprotect-and-authentication","title":"Palo Alto Networks PAN-OS XSS in GlobalProtect and Authentication Portal","severity":"info","exploited":false,"published_at":"2026-07-09T19:16:58.717+00:00","url":"https://junglewise.ai/threats/cve-2026-0279-palo-alto-networks-pan-os-xss-in-globalprotect-and-authentication"},{"cve":"CVE-2026-0288","cvss":7.2,"slug":"cve-2026-0288-palo-alto-networks-pan-os-buffer-overflow-in-user-id-terminal","title":"Palo Alto Networks PAN-OS buffer overflow in User-ID Terminal Server Agent","severity":"info","exploited":false,"published_at":"2026-07-08T21:16:45.59+00:00","url":"https://junglewise.ai/threats/cve-2026-0288-palo-alto-networks-pan-os-buffer-overflow-in-user-id-terminal"},{"cve":"CVE-2026-0274","cvss":8.1,"slug":"cve-2026-0274-palo-alto-networks-cortex-xsoar-improper-credential-validation-in","title":"Palo Alto Networks Cortex XSOAR improper credential validation in CommvaultSecurityIQ","severity":"info","exploited":false,"published_at":"2026-06-10T22:16:55.187+00:00","url":"https://junglewise.ai/threats/cve-2026-0274-palo-alto-networks-cortex-xsoar-improper-credential-validation-in"},{"cve":"CVE-2026-0271","cvss":5.9,"slug":"cve-2026-0271-palo-alto-networks-prisma-access-agent-privilege-escalation-in","title":"Palo Alto Networks Prisma Access Agent privilege escalation in Linux app","severity":"info","exploited":false,"published_at":"2026-06-10T22:16:54.11+00:00","url":"https://junglewise.ai/threats/cve-2026-0271-palo-alto-networks-prisma-access-agent-privilege-escalation-in"},{"cve":"CVE-2026-0270","cvss":4.8,"slug":"cve-2026-0270-palo-alto-networks-cortex-xsoar-path-traversal-in-linux-engine","title":"Palo Alto Networks Cortex XSOAR path traversal in Linux engine","severity":"info","exploited":false,"published_at":"2026-06-10T22:16:53.953+00:00","url":"https://junglewise.ai/threats/cve-2026-0270-palo-alto-networks-cortex-xsoar-path-traversal-in-linux-engine"},{"cve":"CVE-2026-0268","cvss":4.4,"slug":"cve-2026-0268-palo-alto-networks-prisma-access-agent-vpn-bypass-in-linux","title":"Palo Alto Networks Prisma Access Agent VPN bypass in Linux","severity":"info","exploited":false,"published_at":"2026-06-10T22:16:53.413+00:00","url":"https://junglewise.ai/threats/cve-2026-0268-palo-alto-networks-prisma-access-agent-vpn-bypass-in-linux"},{"cve":"CVE-2026-0267","cvss":4.4,"slug":"cve-2026-0267-palo-alto-networks-globalprotect-app-information-exposure-on-macos","title":"Palo Alto Networks GlobalProtect app information exposure on macOS","severity":"info","exploited":false,"published_at":"2026-06-10T22:16:53.187+00:00","url":"https://junglewise.ai/threats/cve-2026-0267-palo-alto-networks-globalprotect-app-information-exposure-on-macos"},{"cve":"CVE-2026-0243","cvss":6.5,"epss":0.0016,"slug":"cve-2026-0243-palo-alto-networks-prisma-sd-wan-ion-denial-of-service-via-ipv6","title":"Palo Alto Networks Prisma SD-WAN ION denial of service via IPv6 packet","severity":"medium","exploited":false,"published_at":"2026-05-13T20:16:18.043+00:00","url":"https://junglewise.ai/threats/cve-2026-0243-palo-alto-networks-prisma-sd-wan-ion-denial-of-service-via-ipv6"},{"cve":"CVE-2026-0262","cvss":6.6,"epss":0.0007,"slug":"cve-2026-0262-palo-alto-networks-pan-os-denial-of-service-in-traffic-parsing","title":"Palo Alto Networks PAN-OS denial of service in traffic parsing","severity":"info","exploited":false,"published_at":"2026-05-13T19:17:02.603+00:00","url":"https://junglewise.ai/threats/cve-2026-0262-palo-alto-networks-pan-os-denial-of-service-in-traffic-parsing"},{"cve":"CVE-2026-0261","cvss":6.1,"epss":0.0011,"slug":"cve-2026-0261-palo-alto-networks-pan-os-command-injection-in-cli-and-web-ui","title":"Palo Alto Networks PAN-OS command injection in CLI and Web UI","severity":"info","exploited":false,"published_at":"2026-05-13T19:17:02.097+00:00","url":"https://junglewise.ai/threats/cve-2026-0261-palo-alto-networks-pan-os-command-injection-in-cli-and-web-ui"}],"vendor":{"hub":true,"name":"Palo Alto Networks","slug":"palo-alto-networks","homepage":"https://www.paloaltonetworks.com/","description":"Gladinet is a software company that develops cloud file server and data management solutions.","url":"https://junglewise.ai/threats/vendors/palo-alto-networks"},"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":10},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":7},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-0257","cvss":4.7,"epss":0.0007,"slug":"cve-2026-0257-palo-alto-networks-pan-os-auth-bypass-in-globalprotect","title":"Palo Alto Networks PAN-OS auth bypass in GlobalProtect","severity":"critical","exploited":true,"published_at":"2026-05-13T19:17:01.04+00:00","url":"https://junglewise.ai/threats/cve-2026-0257-palo-alto-networks-pan-os-auth-bypass-in-globalprotect"},{"cve":"CVE-2026-0234","cvss":9.1,"epss":0.0024,"slug":"cve-2026-0234-palo-alto-networks-cortex-xsoar-signature-bypass-in-microsoft","title":"Palo Alto Networks Cortex XSOAR signature bypass in Microsoft Teams integration","severity":"critical","exploited":false,"published_at":"2026-04-13T08:16:22.367+00:00","url":"https://junglewise.ai/threats/cve-2026-0234-palo-alto-networks-cortex-xsoar-signature-bypass-in-microsoft"},{"cve":"CVE-2026-0259","cvss":8.8,"epss":0.0028,"slug":"cve-2026-0259-palo-alto-networks-wildfire-wf-500-arbitrary-file-read-and-delete","title":"Palo Alto Networks WildFire WF-500 arbitrary file read and delete","severity":"high","exploited":false,"published_at":"2026-05-13T19:17:01.873+00:00","url":"https://junglewise.ai/threats/cve-2026-0259-palo-alto-networks-wildfire-wf-500-arbitrary-file-read-and-delete"},{"cve":"CVE-2026-0233","cvss":8.8,"epss":0.0016,"slug":"cve-2026-0233-palo-alto-networks-adem-improper-certificate-validation-on-windows","title":"Palo Alto Networks ADEM improper certificate validation on Windows","severity":"high","exploited":false,"published_at":"2026-04-13T08:16:22.15+00:00","url":"https://junglewise.ai/threats/cve-2026-0233-palo-alto-networks-adem-improper-certificate-validation-on-windows"},{"cve":"CVE-2026-0240","cvss":8.7,"epss":0.0021,"slug":"cve-2026-0240-palo-alto-networks-trust-protection-foundation-information","title":"Palo Alto Networks Trust Protection Foundation information disclosure in vault","severity":"high","exploited":false,"published_at":"2026-05-13T19:16:57.767+00:00","url":"https://junglewise.ai/threats/cve-2026-0240-palo-alto-networks-trust-protection-foundation-information"},{"cve":"CVE-2026-0250","cvss":8.1,"epss":0.0021,"slug":"cve-2026-0250-palo-alto-networks-globalprotect-buffer-overflow-in-portal-gateway","title":"Palo Alto Networks GlobalProtect buffer overflow in Portal/Gateway communication","severity":"high","exploited":false,"published_at":"2026-05-13T19:16:59.26+00:00","url":"https://junglewise.ai/threats/cve-2026-0250-palo-alto-networks-globalprotect-buffer-overflow-in-portal-gateway"},{"cve":"CVE-2026-0244","cvss":8.1,"epss":0.0011,"slug":"cve-2026-0244-palo-alto-networks-prisma-sd-wan-ion-improper-certificate","title":"Palo Alto Networks Prisma SD-WAN ION improper certificate validation","severity":"high","exploited":false,"published_at":"2026-05-13T19:16:58.297+00:00","url":"https://junglewise.ai/threats/cve-2026-0244-palo-alto-networks-prisma-sd-wan-ion-improper-certificate"},{"cve":"CVE-2026-0247","cvss":7.8,"epss":0.0017,"slug":"cve-2026-0247-palo-alto-networks-prisma-access-agent-authorization-bypass-in","title":"Palo Alto Networks Prisma Access Agent authorization bypass in Endpoint DLP","severity":"high","exploited":false,"published_at":"2026-05-13T19:16:58.78+00:00","url":"https://junglewise.ai/threats/cve-2026-0247-palo-alto-networks-prisma-access-agent-authorization-bypass-in"},{"cve":"CVE-2026-0251","cvss":7.8,"epss":0.0016,"slug":"cve-2026-0251-palo-alto-networks-globalprotect-local-privilege-escalation","title":"Palo Alto Networks GlobalProtect local privilege escalation","severity":"high","exploited":false,"published_at":"2026-05-13T19:16:59.47+00:00","url":"https://junglewise.ai/threats/cve-2026-0251-palo-alto-networks-globalprotect-local-privilege-escalation"},{"cve":"CVE-2026-0237","cvss":7.8,"epss":0.0015,"slug":"cve-2026-0237-palo-alto-networks-prisma-browser-security-bypass-in-automation","title":"Palo Alto Networks Prisma Browser security bypass in automation bridge","severity":"high","exploited":false,"published_at":"2026-05-13T18:16:12.99+00:00","url":"https://junglewise.ai/threats/cve-2026-0237-palo-alto-networks-prisma-browser-security-bypass-in-automation"}],"generated_at":"2026-09-28T03:07:00.154823+00:00","technologies":[{"name":"Palo Alto Networks Prisma Access Agent","slug":"prisma-access-agent","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/prisma-access-agent"},{"name":"Palo Alto Networks Prisma Access","slug":"prisma-access","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/prisma-access"},{"name":"Palo Alto Networks GlobalProtect App","slug":"globalprotect-app","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/globalprotect-app"},{"name":"Palo Alto Networks Panorama","slug":"panorama","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/panorama"},{"name":"Palo Alto Networks Prisma Browser","slug":"prisma-browser","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/prisma-browser"},{"name":"Palo Alto Networks Trust Protection Foundation","slug":"trust-protection-foundation","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/trust-protection-foundation"}]}