Palo Alto Networks: exploited vulnerabilities
- 16exploited vulnerabilities
- 6used by ransomware
- Oct 14, 2026latest one added
- PAN-OS 13
- Expedition 3
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Oct 14, 2026 | Code Injection | PAN-OS | High 8.6 | 1.7% |
| May 29, 2026 | Authentication Bypass | PAN-OS | High 7.8 | 95% |
| May 6, 2026 | Out-of-bounds Write | PAN-OS | Critical 9.3 | 42% |
| Feb 20, 2025 | File Read | PAN-OS | High 7.1 | 2.0% |
| Feb 18, 2025 | Authentication Bypass | PAN-OS | High 8.8 | 98% |
| Dec 30, 2024 | Malicious DNS Packet | PAN-OS | High 8.7 | 29% |
| Nov 18, 2024 | Management Interface OS Command Injection | PAN-OS | Medium 6.9 | 94% |
| Nov 18, 2024 | Management Interface Authentication Bypass | PAN-OS | Critical 9.3 | 99.8% |
| Nov 14, 2024 | SQL Injection | Expedition | Critical 9.2 | 99.6% |
| Nov 14, 2024 | OS Command Injection | Expedition | Critical 9.9 | 99% |
| Nov 7, 2024 | Missing Authentication | Expedition | Critical 9.3 | 92% |
| Apr 12, 2024 | Command Injection | PAN-OS | Critical 10.0 | >99.9% |
| Aug 22, 2022 | Reflected Amplification Denial-of-Service | PAN-OS | High 8.6 | 2.7% |
| Aug 18, 2022 | Remote Code Execution | PAN-OS | Critical 9.8 | 98% |
| Mar 25, 2022 | Authentication Bypass | PAN-OS | Critical 10.0 | 4.4% |
| Jan 10, 2022 | Remote Code Execution | PAN-OS | High 8.1 | 44% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.