# Palo Alto Networks vulnerabilities Source: https://junglewise.ai/threats/vendors/palo-alto-networks Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/palo-alto-networks.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 73 vulnerabilities in Palo Alto Networks: 8 in the last 7 days and 22 in the last 90 days, 15 of them critical and 14 exploited in the wild. The most recent, CVE-2026-0331, was published on 11 November 2026. 7 vulnerabilities in the last four weeks, up from none in the four before. 1 critical against 0, 1 exploited in the wild against 0. 10 technologies have a page of their own. ## Counts - Last 7 days: 8 - Last 30 days: 15 - Last 90 days: 22 - All time: 73 (15 critical, 14 exploited in the wild) ## About Palo Alto Networks Gladinet is a software company that develops cloud file server and data management solutions. ## Latest Palo Alto Networks vulnerabilities - [CVE-2026-0331: Palo Alto Networks PAN-OS information disclosure via dataplane interface](https://junglewise.ai/threats/cve-2026-0331-an-information-disclosure-vulnerability-in-palo-alto-networks-pan) (info, published 11 Nov 2026) - [CVE-2026-0329: Palo Alto Networks PAN-OS buffer overflow denial of service](https://junglewise.ai/threats/cve-2026-0329-a-buffer-overflow-vulnerability-in-palo-alto-networks-pan-os) (info, published 11 Nov 2026) - [CVE-2026-0328: Palo Alto Networks PAN-OS authentication bypass in GlobalProtect](https://junglewise.ai/threats/cve-2026-0328-authentication-bypass-vulnerabilities-in-the-globalprotect-portal) (info, published 11 Nov 2026) - [CVE-2026-0327: Palo Alto Networks PAN-OS privilege escalation in GlobalProtect](https://junglewise.ai/threats/cve-2026-0327-a-privilege-escalation-vulnerability-in-the-globalprotect-gateway) (info, published 11 Nov 2026) - [CVE-2026-0326: Palo Alto Networks PAN-OS buffer overflow in protocol and service processing](https://junglewise.ai/threats/cve-2026-0326-a-buffer-overflow-vulnerability-in-palo-alto-networks-pan-os) (info, published 11 Nov 2026) - [CVE-2026-0325: Palo Alto Networks PAN-OS GlobalProtect authorization bypass](https://junglewise.ai/threats/cve-2026-0325-an-authorization-bypass-vulnerability-in-the-globalprotect-gateway) (info, published 11 Nov 2026) - [CVE-2026-0324: Palo Alto Networks GlobalProtect privilege escalation in MetaDefender SDK](https://junglewise.ai/threats/cve-2026-0324-an-incorrect-privilege-management-vulnerability-in-the-opswat) (info, published 11 Nov 2026) - [CVE-2026-0323: Palo Alto Networks Checkov by Prisma Cloud SSRF](https://junglewise.ai/threats/cve-2026-0323-a-server-side-request-forgery-vulnerability-in-palo-alto-networks) (info, published 11 Nov 2026) - [CVE-2026-0320: Palo Alto Networks PAN-OS authenticated admin command injection](https://junglewise.ai/threats/cve-2026-0320-a-command-injection-vulnerability-in-palo-alto-networks-pan-os) (info, published 14 Oct 2026) - [CVE-2026-0319: Palo Alto Networks PAN-OS GlobalProtect session hijacking](https://junglewise.ai/threats/cve-2026-0319-an-improper-input-handling-vulnerability-in-the-globalprotect) (info, published 14 Oct 2026) - [CVE-2026-0318: Palo Alto Networks PAN-OS stack-based buffer overflow on Panorama](https://junglewise.ai/threats/cve-2026-0318-a-stack-based-buffer-overflow-vulnerability-in-the-log-processing) (info, published 14 Oct 2026) - [CVE-2026-0317: Palo Alto Networks PAN-OS denial of service in API request handler](https://junglewise.ai/threats/cve-2026-0317-a-denial-of-service-vulnerability-in-palo-alto-networks-pan-os) (info, published 14 Oct 2026) - [CVE-2026-0316: Palo Alto Networks PAN-OS stored XSS in web interface](https://junglewise.ai/threats/cve-2026-0316-a-stored-cross-site-scripting-xss-vulnerability-in-palo-alto) (info, published 14 Oct 2026) - [CVE-2026-0321: Palo Alto Networks PAN-OS denial of service in network services](https://junglewise.ai/threats/cve-2026-0321-denial-of-service-vulnerabilities-in-palo-alto-networks-pan-os) (info, published 14 Oct 2026) - [CVE-2026-0322: Palo Alto Networks PAN-OS code injection vulnerability](https://junglewise.ai/threats/cve-2026-0322-palo-alto-networks-pan-os-code-injection-vulnerability) (critical, exploited in the wild, CVSS 7.2, published 14 Oct 2026) - [CVE-2026-0304: Palo Alto Networks Cortex XDR Broker VM privilege escalation](https://junglewise.ai/threats/cve-2026-0304-palo-alto-networks-cortex-xdr-broker-vm-privilege-escalation) (info, CVSS 4.8, published 10 Sep 2026) - [CVE-2026-0303: Palo Alto Networks Checkov arbitrary code execution via auto-loaded configuration](https://junglewise.ai/threats/cve-2026-0303-palo-alto-networks-checkov-arbitrary-code-execution-via-auto) (info, CVSS 2.4, published 10 Sep 2026) - [CVE-2026-0302: Palo Alto Networks Checkov OS command injection](https://junglewise.ai/threats/cve-2026-0302-palo-alto-networks-checkov-os-command-injection) (info, CVSS 4.7, published 10 Sep 2026) - [CVE-2026-0310: Palo Alto Networks PAN-OS buffer overflow in XML processing](https://junglewise.ai/threats/cve-2026-0310-palo-alto-networks-pan-os-buffer-overflow-in-xml-processing) (info, CVSS 7.2, published 10 Sep 2026) - [CVE-2026-0308: Palo Alto Networks PAN-OS stored XSS in web interface](https://junglewise.ai/threats/cve-2026-0308-palo-alto-networks-pan-os-stored-xss-in-web-interface) (info, CVSS 4.8, published 10 Sep 2026) - [CVE-2026-0306: Palo Alto Networks Prisma Access Agent DLP bypass on Windows](https://junglewise.ai/threats/cve-2026-0306-palo-alto-networks-prisma-access-agent-dlp-bypass-on-windows) (info, CVSS 5.8, published 10 Sep 2026) - [CVE-2026-0305: Palo Alto Networks Prisma Access Agent information disclosure on Linux](https://junglewise.ai/threats/cve-2026-0305-palo-alto-networks-prisma-access-agent-information-disclosure-on) (info, CVSS 4.3, published 10 Sep 2026) - [CVE-2026-0278: Palo Alto Networks Prisma Access Agent DLP bypass on Windows](https://junglewise.ai/threats/cve-2026-0278-palo-alto-networks-prisma-access-agent-dlp-bypass-on-windows) (info, CVSS 5.8, published 9 Jul 2026) - [CVE-2026-0277: Palo Alto Networks Prisma Access Agent improper certificate validation in iOS](https://junglewise.ai/threats/cve-2026-0277-palo-alto-networks-prisma-access-agent-improper-certificate) (info, CVSS 5.7, published 9 Jul 2026) - [CVE-2026-0276: Palo Alto Networks Cortex XDR Broker VM privilege escalation](https://junglewise.ai/threats/cve-2026-0276-palo-alto-networks-cortex-xdr-broker-vm-privilege-escalation) (info, CVSS 4.8, published 9 Jul 2026) ## Most severe Palo Alto Networks vulnerabilities - [CVE-2024-3400: Palo Alto Networks PAN-OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-3400-palo-alto-networks-pan-os-command-injection-vulnerability) (critical, exploited in the wild, CVSS 10, published 12 Apr 2024) - [CVE-2020-2021: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2020-2021-palo-alto-networks-pan-os-authentication-bypass-vulnerability) (critical, exploited in the wild, CVSS 10, published 25 Mar 2022) - [CVE-2024-9463: Palo Alto Networks Expedition OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-9463-palo-alto-networks-expedition-os-command-injection-vulnerability) (critical, exploited in the wild, CVSS 9.9, published 14 Nov 2024) - [CVE-2024-0012: Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2024-0012-palo-alto-networks-pan-os-management-interface-authentication) (critical, exploited in the wild, CVSS 9.8, published 18 Nov 2024) - [CVE-2024-5910: Palo Alto Networks Expedition Missing Authentication Vulnerability](https://junglewise.ai/threats/cve-2024-5910-palo-alto-networks-expedition-missing-authentication-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 7 Nov 2024) - [CVE-2017-15944: Palo Alto Networks PAN-OS Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-15944-palo-alto-networks-pan-os-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 18 Aug 2022) - [CVE-2024-9465: Palo Alto Networks Expedition SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2024-9465-palo-alto-networks-expedition-sql-injection-vulnerability) (critical, exploited in the wild, CVSS 9.2, published 14 Nov 2024) - [CVE-2025-0108: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability](https://junglewise.ai/threats/cve-2025-0108-palo-alto-networks-pan-os-authentication-bypass-vulnerability) (critical, exploited in the wild, CVSS 9.1, published 18 Feb 2025) - [CVE-2024-3393: Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability](https://junglewise.ai/threats/cve-2024-3393-palo-alto-networks-pan-os-malicious-dns-packet-vulnerability) (critical, exploited in the wild, CVSS 8.7, published 30 Dec 2024) - [CVE-2022-0028: Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability](https://junglewise.ai/threats/cve-2022-0028-palo-alto-networks-pan-os-reflected-amplification-denial-of) (critical, exploited in the wild, CVSS 8.6, published 22 Aug 2022) ## Vulnerabilities per week 7 vulnerabilities in the last four weeks, up from none in the four before. 1 critical against 0, 1 exploited in the wild against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 7 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 7 | 1 | 1 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 8 | 0 | 0 | ## Palo Alto Networks technologies - [Palo Alto Networks PAN-OS](https://junglewise.ai/threats/technologies/pan-os): 22 vulnerabilities - [Palo Alto Networks Prisma Access](https://junglewise.ai/threats/technologies/prisma-access): 13 vulnerabilities - [Palo Alto Networks Prisma Access Agent](https://junglewise.ai/threats/technologies/prisma-access-agent): 10 vulnerabilities - [Palo Alto Networks Panorama](https://junglewise.ai/threats/technologies/panorama): 6 vulnerabilities - [Palo Alto Networks GlobalProtect App](https://junglewise.ai/threats/technologies/globalprotect-app): 4 vulnerabilities - [Palo Alto Networks Prisma Browser](https://junglewise.ai/threats/technologies/prisma-browser): 4 vulnerabilities - [Palo Alto Networks Checkov by Prisma Cloud](https://junglewise.ai/threats/technologies/checkov-by-prisma-cloud): 3 vulnerabilities - [Palo Alto Networks Cloud NGFW](https://junglewise.ai/threats/technologies/cloud-ngfw): 3 vulnerabilities - [Palo Alto Networks Expedition](https://junglewise.ai/threats/technologies/expedition): 3 vulnerabilities - [Palo Alto Networks Trust Protection Foundation](https://junglewise.ai/threats/technologies/trust-protection-foundation): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Palo Alto Networks vulnerabilities", https://junglewise.ai/threats/vendors/palo-alto-networks, 12 November 2026.