Export limit exceeded: 376603 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 376603 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (397 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2025-0130 | 1 Paloaltonetworks | 1 Pan-os | 2026-05-29 | 7.5 High |
| A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated attacker to send a burst of maliciously crafted packets that causes the firewall to become unresponsive and eventually reboot. Repeated successful attempts to trigger this condition will cause the firewall to enter maintenance mode. This issue does not affect Cloud NGFW or Prisma Access. | ||||
| CVE-2026-0240 | 2 Palo Alto Networks, Paloaltonetworks | 2 Trust Protection Foundation, Trust Protection Foundation | 2026-05-15 | 8.7 High |
| An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploitation of this issue allows the attacker to impersonate any user within the environment and arbitrarily modify configuration settings. | ||||
| CVE-2026-0249 | 2 Palo Alto Networks, Paloaltonetworks | 2 Globalprotect App, Globalprotect | 2026-05-15 | 6.5 Medium |
| Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software. The GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected. | ||||
| CVE-2026-0246 | 5 Apple, Linux, Microsoft and 2 more | 6 Macos, Linux Kernel, Windows and 3 more | 2026-05-14 | 7.8 High |
| A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally authenticated non-administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows. This allows the user to execute arbitrary code and read sensitive information otherwise accessible only to privileged accounts. The Prisma Access Agent on iOS, Android and Chrome OS are not affected. | ||||
| CVE-2026-0245 | 4 Apple, Microsoft, Palo Alto Networks and 1 more | 5 Macos, Windows, Prisma Access and 2 more | 2026-05-14 | 5.5 Medium |
| Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials. The Prisma Access Agent on Linux, ChromeOS, Android, and iOS are not affected. | ||||
| CVE-2026-0248 | 3 Google, Palo Alto Networks, Paloaltonetworks | 5 Android, Chrome Os, Prisma Access and 2 more | 2026-05-14 | 5.9 Medium |
| An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. By presenting a certificate for any domain issued by a trusted Certificate Authority, the attacker can capture sensitive device information. The Prisma Access Agent on macOS, Windows, Linux and iOS are not affected. | ||||
| CVE-2026-0243 | 2 Palo Alto Networks, Paloaltonetworks | 21 Prisma Sd-wan Ion, Ion 1200, Ion 1200-c-na and 18 more | 2026-05-14 | 6.5 Medium |
| A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to cause a system disruption by sending a specially crafted IPv6 packet. | ||||
| CVE-2026-0250 | 2 Palo Alto Networks, Paloaltonetworks | 3 Globalprotect App, Globalprotect Uwp App, Globalprotect | 2026-05-14 | 8.1 High |
| A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected. | ||||
| CVE-2024-8686 | 1 Paloaltonetworks | 1 Pan-os | 2026-05-13 | 7.2 High |
| A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as root on the firewall. | ||||
| CVE-2024-3385 | 1 Paloaltonetworks | 8 Pa-5410, Pa-5420, Pa-5430 and 5 more | 2026-05-13 | 7.5 High |
| A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online. This affects the following hardware firewall models: - PA-5400 Series firewalls - PA-7000 Series firewalls | ||||
| CVE-2024-2433 | 1 Paloaltonetworks | 1 Pan-os | 2026-05-13 | 4.3 Medium |
| An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenticated read-only administrator to upload files using the web interface and completely fill one of the disk partitions with those uploaded files, which prevents the ability to log into the web interface or to download PAN-OS, WildFire, and content images. This issue affects only the web interface of the management plane; the dataplane is unaffected. | ||||
| CVE-2024-3382 | 1 Paloaltonetworks | 6 Pa-5410, Pa-5420, Pa-5430 and 3 more | 2026-05-13 | 7.5 High |
| A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets through the firewall that eventually prevents the firewall from processing traffic. This issue applies only to PA-5400 Series devices that are running PAN-OS software with the SSL Forward Proxy feature enabled. | ||||
| CVE-2024-3386 | 1 Paloaltonetworks | 1 Pan-os | 2026-05-13 | 5.3 Medium |
| An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended. This can cause traffic destined for domains that are not specified in Predefined Decryption Exclusions to be unintentionally excluded from decryption. | ||||
| CVE-2026-0247 | 4 Apple, Microsoft, Palo Alto Networks and 1 more | 4 Macos, Windows, Prisma Access Agent and 1 more | 2026-05-13 | 7.8 High |
| Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations. | ||||
| CVE-2026-0241 | 2 Palo Alto Networks, Paloaltonetworks | 2 Trust Protection Foundation, Trust Protection Foundation | 2026-05-13 | 7.2 High |
| Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources. | ||||
| CVE-2026-0244 | 2 Palo Alto Networks, Paloaltonetworks | 21 Prisma Sd-wan Ion, Ion 1200, Ion 1200-c-na and 18 more | 2026-05-13 | 8.1 High |
| An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller. | ||||
| CVE-2026-0259 | 2 Palo Alto Networks, Paloaltonetworks | 4 Wildfire Wf-500 And Wf-500-b, Pan-os, Wf-500 and 1 more | 2026-05-13 | 8.8 High |
| An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables users to read sensitive information and delete arbitrary files. This vulnerability affects WF-500 and WF-500-B appliances running in the default non-FIPS configuration mode. The WildFire Appliance (WF-500, WF-500-B) software update is now available to customers that use the WildFire Appliance (WF-500, WF-500-B) for on-premise sandboxing. Please note that customers using the WildFire Public cloud service are NOT impacted by this vulnerability. | ||||
| CVE-2026-0251 | 2 Palo Alto Networks, Paloaltonetworks | 2 Globalprotect App, Globalprotect | 2026-05-13 | 7.8 High |
| Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected. | ||||
| CVE-2026-0238 | 2 Palo Alto Networks, Paloaltonetworks | 2 Broker Vm, Broker Vm | 2026-05-13 | 3.2 Low |
| A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields. | ||||
| CVE-2026-0236 | 3 Apple, Palo Alto Networks, Paloaltonetworks | 3 Macos, Prisma Browser, Prisma Browser | 2026-05-13 | 7.8 High |
| A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser. | ||||