# Paloaltonetworks vulnerabilities Source: https://junglewise.ai/threats/vendors/paloaltonetworks Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/paloaltonetworks.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 19 vulnerabilities in Paloaltonetworks: 0 in the last 7 days and 1 in the last 90 days, 3 of them critical and 2 exploited in the wild. The most recent, CVE-2026-0322, was published on 14 October 2026. 1 vulnerability in the last four weeks, up from none in the four before. 1 critical against 0, 1 exploited in the wild against 0. 2 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 1 - All time: 19 (3 critical, 2 exploited in the wild) ## About Paloaltonetworks American cybersecurity company that develops firewalls, cloud security, and threat intelligence platforms. ## Latest Paloaltonetworks vulnerabilities - [CVE-2026-0322: Palo Alto Networks PAN-OS code injection vulnerability](https://junglewise.ai/threats/cve-2026-0322-palo-alto-networks-pan-os-code-injection-vulnerability) (critical, exploited in the wild, CVSS 7.2, published 14 Oct 2026) - [CVE-2026-0301: An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an…](https://junglewise.ai/threats/cve-2026-0301-an-information-disclosure-vulnerability-in-the-url-filtering) (high, CVSS 7.5, published 13 Aug 2026) - [CVE-2026-0299: Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to…](https://junglewise.ai/threats/cve-2026-0299-local-privilege-escalation-vulnerabilities-in-the-palo-alto) (high, CVSS 7.8, published 13 Aug 2026) - [CVE-2026-0298: An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the…](https://junglewise.ai/threats/cve-2026-0298-an-improper-input-validation-vulnerability-exists-in-the-windows) (high, CVSS 8.1, published 13 Aug 2026) - [CVE-2026-0297: A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle…](https://junglewise.ai/threats/cve-2026-0297-a-buffer-overflow-vulnerability-exists-in-the-palo-alto-networks) (high, CVSS 8.1, published 13 Aug 2026) - [CVE-2026-0296: Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated…](https://junglewise.ai/threats/cve-2026-0296-improper-certificate-validation-vulnerabilities-in-palo-alto) (high, CVSS 7.4, published 13 Aug 2026) - [CVE-2026-0295: A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated…](https://junglewise.ai/threats/cve-2026-0295-a-race-condition-in-the-palo-alto-networks-globalprotect-client-on) (high, CVSS 7, published 13 Aug 2026) - [CVE-2026-0294: A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS…](https://junglewise.ai/threats/cve-2026-0294-a-privilege-escalation-pe-vulnerability-in-the-palo-alto-networks) (high, CVSS 7.8, published 13 Aug 2026) - [CVE-2026-0293: A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator…](https://junglewise.ai/threats/cve-2026-0293-a-vulnerability-in-palo-alto-networks-prisma-access-agent-on) (medium, CVSS 6, published 13 Aug 2026) - [CVE-2026-0292: An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows…](https://junglewise.ai/threats/cve-2026-0292-an-authentication-bypass-vulnerability-in-the-network-driver-of) (medium, CVSS 6, published 13 Aug 2026) - [CVE-2026-0291: An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on…](https://junglewise.ai/threats/cve-2026-0291-an-improper-link-resolution-before-file-access-vulnerability) (medium, CVSS 4.4, published 13 Aug 2026) - [CVE-2026-0290: An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser…](https://junglewise.ai/threats/cve-2026-0290-an-information-disclosure-vulnerability-in-the-account-protection) (medium, CVSS 5.5, published 13 Aug 2026) - [CVE-2026-0289: A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user…](https://junglewise.ai/threats/cve-2026-0289-a-security-bypass-vulnerability-in-the-account-protection-feature) (medium, CVSS 6.5, published 13 Aug 2026) - [CVE-2026-0239: Palo Alto Networks Chronosphere Chronocollector information disclosure](https://junglewise.ai/threats/cve-2026-0239-palo-alto-networks-chronosphere-chronocollector-information) (medium, CVSS 6.5, published 13 May 2026) - [CVE-2026-0300: Palo Alto Networks PAN-OS buffer overflow in User-ID Authentication Portal](https://junglewise.ai/threats/cve-2026-0300-palo-alto-networks-pan-os-buffer-overflow-in-user-id) (critical, exploited in the wild, CVSS 9.8, published 6 May 2026) - [CVE-2026-0234: Palo Alto Networks Cortex XSOAR signature bypass in Microsoft Teams integration](https://junglewise.ai/threats/cve-2026-0234-palo-alto-networks-cortex-xsoar-signature-bypass-in-microsoft) (critical, CVSS 9.1, published 13 Apr 2026) - [CVE-2026-0233: Palo Alto Networks ADEM improper certificate validation on Windows](https://junglewise.ai/threats/cve-2026-0233-palo-alto-networks-adem-improper-certificate-validation-on-windows) (high, CVSS 8.8, published 13 Apr 2026) - [CVE-2017-5329: Palo Alto Networks Terminal Services Agent privilege escalation](https://junglewise.ai/threats/cve-2017-5329-palo-alto-networks-terminal-services-agent-privilege-escalation) (high, CVSS 7.8, published 27 Jan 2017) - [CVE-2017-5328: Palo Alto Networks Terminal Services Agent user spoofing](https://junglewise.ai/threats/cve-2017-5328-palo-alto-networks-terminal-services-agent-user-spoofing) (high, CVSS 7.5, published 27 Jan 2017) ## Most severe Paloaltonetworks vulnerabilities - [CVE-2026-0300: Palo Alto Networks PAN-OS buffer overflow in User-ID Authentication Portal](https://junglewise.ai/threats/cve-2026-0300-palo-alto-networks-pan-os-buffer-overflow-in-user-id) (critical, exploited in the wild, CVSS 9.8, published 6 May 2026) - [CVE-2026-0322: Palo Alto Networks PAN-OS code injection vulnerability](https://junglewise.ai/threats/cve-2026-0322-palo-alto-networks-pan-os-code-injection-vulnerability) (critical, exploited in the wild, CVSS 7.2, published 14 Oct 2026) - [CVE-2026-0234: Palo Alto Networks Cortex XSOAR signature bypass in Microsoft Teams integration](https://junglewise.ai/threats/cve-2026-0234-palo-alto-networks-cortex-xsoar-signature-bypass-in-microsoft) (critical, CVSS 9.1, published 13 Apr 2026) - [CVE-2026-0233: Palo Alto Networks ADEM improper certificate validation on Windows](https://junglewise.ai/threats/cve-2026-0233-palo-alto-networks-adem-improper-certificate-validation-on-windows) (high, CVSS 8.8, published 13 Apr 2026) - [CVE-2026-0298: An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the…](https://junglewise.ai/threats/cve-2026-0298-an-improper-input-validation-vulnerability-exists-in-the-windows) (high, CVSS 8.1, published 13 Aug 2026) - [CVE-2026-0297: A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle…](https://junglewise.ai/threats/cve-2026-0297-a-buffer-overflow-vulnerability-exists-in-the-palo-alto-networks) (high, CVSS 8.1, published 13 Aug 2026) - [CVE-2026-0299: Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to…](https://junglewise.ai/threats/cve-2026-0299-local-privilege-escalation-vulnerabilities-in-the-palo-alto) (high, CVSS 7.8, published 13 Aug 2026) - [CVE-2026-0294: A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS…](https://junglewise.ai/threats/cve-2026-0294-a-privilege-escalation-pe-vulnerability-in-the-palo-alto-networks) (high, CVSS 7.8, published 13 Aug 2026) - [CVE-2017-5329: Palo Alto Networks Terminal Services Agent privilege escalation](https://junglewise.ai/threats/cve-2017-5329-palo-alto-networks-terminal-services-agent-privilege-escalation) (high, CVSS 7.8, published 27 Jan 2017) - [CVE-2026-0301: An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an…](https://junglewise.ai/threats/cve-2026-0301-an-information-disclosure-vulnerability-in-the-url-filtering) (high, CVSS 7.5, published 13 Aug 2026) ## Vulnerabilities per week 1 vulnerability in the last four weeks, up from none in the four before. 1 critical against 0, 1 exploited in the wild against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 1 | 1 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Paloaltonetworks technologies - [Paloaltonetworks Globalprotect](https://junglewise.ai/threats/technologies/globalprotect): 5 vulnerabilities - [Paloaltonetworks Prisma Access Agent](https://junglewise.ai/threats/technologies/paloaltonetworks-prisma-access-agent): 4 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Paloaltonetworks vulnerabilities", https://junglewise.ai/threats/vendors/paloaltonetworks, 12 November 2026.