Known vulnerabilities in Palo Alto PAN-OS - page 2
Vendor:
Palo Alto Networks, Inc.
Software:
Palo Alto PAN-OS
Software CPE:
cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Website:
https://www.paloaltonetworks.com/
Total vulnerabilities:
254
Public exploits:
20
Known exploited (KEV):
12
Highest CVSSv4 Score:
10
Breakdown by Severity Chart
11.1.17
11.1.16-h1
11.2.10-h11
10.2.18-h8
10.2.16-h9
10.2.13-h23
10.2.10-h39
10.2.7-h36
11.1.13-h9
11.1.10-h30
11.1.7-h8
11.1.6-h35
11.1.4-h35
11.2.10-h12
11.2.7-h18
11.2.4-h20
12.1.4-h8
12.1.7-h2
12.1.7-h1
11.1.16
11.2.13
12.1.8
12.2
10.2.18-h7
11.1.7-h7
12.1.6
10.2.7-h35
10.2.10-h37
10.2.13-h22
10.2.16-h8
11.1.4-h34
11.1.6-h33
11.1.10-h27
11.1.13-h7
11.2.4-h18
11.2.7-h16
11.2.10-h9
11.1.10-h26
11.1.13-h6
11.2.7-h14
11.2.7-h15
11.2.10-h7
11.2.10-h8
12.1.4-h7
12.1.4-h6
11.1.14
11.2.11
12.1.5
10.2.13-h21
10.2.7-h34
11.1.15
11.1.7-h6
11.2.12
11.2.4-h17
12.1.7
10.2.18-h6
10.2.16-h7
10.2.10-h36
11.1.13-h5
11.1.10-h25
11.1.6-h32
11.1.4-h33
11.2.10-h6
11.2.7-h13
12.1.4-h5
10.2.18-h5
10.2.18-h4
10.2.18-h3
10.2.18-h2
10.2.13-h20
10.2.13-h19
10.2.10-h35
10.2.10-h34
10.2.10-h33
10.2.10-h32
10.2.10-h31
10.2.7-h33
11.1.13-h4
11.1.13-h3
11.1.13-h2
11.1.13-h1
11.1.10-h24
11.1.10-h23
11.1.10-h22
11.1.10-h21
11.1.10-h20
11.1.10-h19
11.1.10-h18
11.1.10-h17
11.1.10-h16
11.1.10-h15
11.1.10-h14
11.1.10-h13
11.1.10-h12
11.1.10-h11
11.1.10-h10
11.1.7-h5
11.1.7-h4
11.1.7-h3
11.1.7-h1
11.1.6-h31
11.1.6-h30
11.1.6-h29
11.1.6-h28
11.1.6-h27
11.1.6-h26
11.1.6-h25
11.1.6-h24
11.1.4-h32
11.1.4-h31
11.1.4-h30
11.1.4-h29
11.1.4-h28
11.2.10-h5
11.2.10-h4
11.2.10-h3
11.2.7-h12
11.2.7-h11
11.2.7-h10
11.2.7-h9
11.2.4-h16
12.1.4-h4
12.1.4-h3
12.1.4-h2
12.1.4-h1
11.2.9
10.2.7-h32
10.2.10-h30
10.2.13-h18
10.2.16-h6
10.2.18-h1
11.1.4-h27
11.1.6-h23
11.1.10-h9
11.1.13
11.2.4-h15
11.2.7-h8
11.2.10-h2
12.1.4
10.2.7-h31
10.2.7-h30
10.2.7-h29
10.2.7-h28
10.2.7-h27
10.2.7-h26
10.2.7-h25
10.2.10-h29
10.2.10-h28
10.2.10-h27
10.2.10-h26
10.2.10-h25
10.2.10-h24
10.2.10-h23
10.2.10-h22
10.2.10-h21
10.2.10-h20
10.2.10-h19
10.2.10-h18
10.2.10-h16
10.2.10-h15
10.2.13-h17
10.2.13-h16
10.2.13-h15
10.2.13-h14
10.2.13-h13
10.2.13-h12
10.2.13-h11
10.2.13-h10
10.2.13-h9
10.2.13-h8
10.2.13-h7
10.2.13-h6
10.2.16-h5
10.2.16-h4
10.2.16-h3
10.2.16-h2
10.2.16-h1
10.2.18
11.1.10-h8
11.1.10-h7
11.1.10-h6
11.1.10-h5
11.1.10-h4
11.1.10-h3
11.1.10-h2
11.1.10-h1
11.1.6-h22
11.1.6-h21
11.1.6-h20
11.1.6-h19
11.1.6-h18
11.1.6-h17
11.1.6-h16
11.1.6-h15
11.1.6-h14
11.1.6-h13
11.1.6-h12
11.1.6-h11
11.1.6-h10
11.1.6-h9
11.1.6-h8
11.1.6-h7
11.1.6-h6
11.1.6-h5
11.1.6-h4
11.1.6-h3
11.1.6-h2
11.1.4-h26
11.1.4-h25
11.1.4-h24
11.1.4-h23
11.1.4-h22
11.1.4-h21
11.1.4-h20
11.1.4-h19
11.1.4-h18
11.1.4-h17
11.1.4-h16
11.1.4-h15
11.1.4-h14
11.2.10-h1
11.2.10
11.2.7-h7
11.2.7-h6
11.2.7-h5
11.2.7-h4
11.2.7-h3
11.2.7-h2
11.2.7-h1
11.2.4-h14
11.2.4-h13
11.2.4-h12
11.2.4-h11
11.2.4-h10
11.2.4-h9
11.2.4-h8
11.2.4-h7
11.2.4-h6
11.2.4-h5
12.1.3-h2
12.1.3-h1
12.1.3
12.1.2
12.1.1
10.2.12-h4
11.2.3-h6
11.2.3-h5
11.2.3-h4
11.2.3-h3
11.2.3-h2
11.2.3-h1
11.2.2-h2
11.1.4-h13
11.1.4-h12
11.1.4-h11
11.1.4-h10
11.1.4-h9
11.1.4-h8
11.1.4-h7
11.1.4-h6
11.1.4-h5
11.1.3-h13
11.1.3-h12
11.1.3-h11
11.1.3-h9
11.1.3-h8
11.1.3-h7
11.1.3-h5
11.1.3-h3
11.1.3-h1
11.1.2-h18
11.1.2-h17
11.1.2-h16
11.1.2-h15
11.1.2-h13
11.1.2-h11
11.1.2-h10
10.2.7-h24
10.2.7-h23
10.2.7-h22
10.2.7-h21
10.2.7-h20
10.2.7-h19
10.2.7-h18
10.2.7-h17
10.2.8-h21
10.2.8-h20
10.2.8-h19
10.2.8-h18
10.2.8-h17
10.2.8-h16
10.2.8-h15
10.2.8-h14
10.2.8-h12
10.2.8-h11
10.2.8-h9
10.2.8-h8
10.2.8-h7
10.2.8-h6
10.2.8-h5
10.2.9-h21
10.2.9-h20
10.2.9-h19
10.2.9-h18
10.2.9-h17
10.2.9-h16
10.2.9-h15
10.2.9-h14
10.2.11-h12
10.2.11-h11
10.2.11-h10
10.2.11-h9
10.2.11-h8
10.2.11-h7
10.2.11-h6
10.2.11-h5
10.2.12-h6
10.2.12-h5
10.2.12-h3
11.1.12
10.1.14-h15
11.0.7
10.1.14-h14
10.2.16
11.1.9
11.1.10
11.2.7
11.2.8
11.1.11
10.2.17
11.1.7-h2
10.1.13
10.2.4-h17
10.2.4-h18
10.2.4-h19
10.2.4-h20
10.2.4-h21
10.2.4-h22
10.2.4-h23
10.2.4-h24
10.2.4-h26
10.2.4-h27
10.2.4-h28
10.2.4-h29
10.2.4-h30
10.2.4-h31
10.2.4-h32
10.2.10-h13
10.2.10-h14
10.2.4-h25
10.2.9-h13
10.2.9-h12
10.2.10-h17
11.2.0
11.2.6
10.2.15
10.1.14-h13
10.1.14-h12
11.1.7
11.2.5
11.1.8
10.2.14
10.2.13-h5
10.2.13-h4
10.1.14-h11
10.1.14-h10
10.2.8-h2
10.1.14-h9
10.2.13-h3
11.1.6-h1
11.2.4-h4
11.1.6
11.2.4-h3
11.2.4-h2
12.1
10.1.14-h8
10.1.14-h7
10.2.13-h2
10.2.13-h1
10.2.13
10.2.10-h12
10.2.10-h11
10.2.10-h10
10.2.10-h9
10.2.10-h8
10.2.10-h6
10.2.10-h5
10.2.0-h3
10.2.1-h2
10.2.2-h5
10.2.2-h3
10.2.3-h13
10.2.3-h12
10.2.3-h11
10.2.3-h10
10.2.3-h8
10.2.3-h7
10.2.3-h6
10.2.3-h5
10.2.3-h3
10.2.4-h16
10.2.4-h15
10.2.4-h14
10.2.4-h13
10.2.4-h12
10.2.4-h11
10.2.4-h10
10.2.4-h9
10.2.4-h8
10.2.4-h7
10.2.5-h6
10.2.5-h5
10.2.5-h3
10.2.5-h2
10.2.6-h3
10.2.6-h2
10.2.7-h15
10.2.7-h14
10.2.7-h13
10.2.7-h11
10.2.7-h10
10.2.7-h9
10.2.7-h8
10.2.7-h7
10.2.7-h6
10.2.7-h5
10.2.7-h4
11.0.0-h3
11.0.1-h1
11.0.1-h4
11.0.2-h4
11.0.3-h12
11.0.3-h11
11.0.3-h10
11.0.3-h9
11.0.3-h8
11.0.3-h7
11.0.3-h6
11.0.3-h4
11.0.3-h2
11.0.5-h1
11.1.0-h3
11.1.1-h1
11.1.4-h4
11.1.4-h3
11.1.4-h2
11.1.4-h1
10.1.6-h5
10.1.6-h4
10.1.6-h3
10.1.6-h2
10.1.6-h1
10.2.11-h4
10.2.10-h7
10.2.9-14
10.2.8-h13
10.2.7-h16
11.1.3-h10
11.1.2-h14
11.2.2-h3
11.2.2-h1
11.1.3-h6
11.1.3-h4
11.1.3-h2
11.1.2-h12
10.2.11-h3
10.2.11-h2
10.2.11-h1
10.2.8-h10
10.2.7-h12
10.1.14-h6
10.1.14-h5
10.1.14-h4
10.1.14-h3
10.2.12-h2
10.2.12-h1
10.2.12
11.0.6-h1
11.1.5-h1
11.1.5
11.2.4-h1
11.2.4
10.1.14-h1
10.2.4-h6
10.2.4-h5
10.2.11
10.2.10-h4
10.2.10-h3
10.2.10-h2
10.2.10-h1
10.2.9-h11
10.2.9-h10
10.2.9-h9
10.2.9-h8
10.2.9-h7
10.2.9-h6
10.2.9-h5
10.2.9-h4
10.2.9-h3
10.2.9-h2
11.0.6
11.0.4-h5
11.2.3
11.2.2
10.2.8-h1
11.1.2-h9
11.0.4-h3
11.0.4-h2
10.1.14
11.0.4-h4
10.1.14-h2
10.2.10
11.0.5
11.1.4
11.2.1
10.0.12-h6
9.1.19
10.2.8-h4
11.1.3
11.1.2-h4
11.2
10.2.8-h3
10.2.9-h1
11.0.4-h1
11.1.2-h3
11.1.2-h2
10.1.9-h3
10.1.9-h2
10.1.9-h1
10.2.7-h2
10.1.11-h4
10.1.11-h3
10.1.11-h2
11.0.4
10.2.9
10.2.8
10.2.7-h3
10.2.7-h1
10.2.7
10.2.6-h1
10.2.5-h4
10.2.5-h1
10.2.4-h4
10.2.4-h3
10.2.4-h2
10.2.4-h1
10.2.3-h9
10.2.3-h4
10.2.3-h2
10.2.3-h1
10.2.2-h4
10.2.2-h1
10.2.1-h1
10.2.0-h2
10.2.0-h1
11.1.2-h1
11.1.2
11.1.1
11.1.0-h2
11.1.0-h1
11.1.0
11.0.3-h5
11.0.3-h3
11.0.3-h1
11.0.2-h3
11.0.2-h2
11.0.2-h1
11.0.1-h3
11.0.1-h2
11.0.0-h2
11.0.0-h1
9.1.18
10.1.10-h1
10.0.13
9.0.18
10.1.12
10.1.11-h1
8.1.26-h1
9.0.17-h5
9.0.16-h7
9.0.16-h6
9.1.17-h1
9.1.16-h5
9.1.14-h8
9.1.13-h5
9.1.12-h7
9.1.11-h5
8.1.25-h3
8.1.21-h3
10.0.12-h5
10.0.11-h4
10.0.8-h11
9.0.17-h3
9.0.17-h2
9.1.16-h3
9.1.16-h2
9.1.16-h1
11.0.3
9.1.17
8.1.26
9.0.17-h4
9.1.16-h4
10.0.12-h4
8.1.25-h2
9.0.16-6
10.0.12-h3
10.0.8-h10
10.0.11-h3
9.1.13-h4
8.1.25-h1
9.1.12-h6
9.0.16-h5
9.1.14-h7
9.1.11-h4
9-1-16-h3
10.2.6
11.1
11.0
10.1
10.0
10.1.11
11.0.2
11.0.0
10.2.5
10.1.10
11.0.1
8.1.25
10.0.12-h1
10.2.4
9.0.17-h1
9.1.16
10.0.12
9.0.17
8.1.24-h2
10.1.9
8.1.24-h1
9.1.15-h1
10.2
9.1.15
10.1.8
8.1.24
10.2.3
10.1.7
10.0.11-h1
8.1.23-h1
9.0.16-h3
9.1.14-h4
10.1.6-h6
10.2.2-h2
10.2.2
10.0.11
9.1.14-h1
10.1.6
9.1.14
10.0.10-h1
9.0.16-h2
9.1.13-h3
10.2.1
10.2.0
10.1.5-hf
10.1.5
10.0.10
9.1.13-hf
9.0.16-hf
8.1.23
9.1.13-h1
9.0.16
8.1.22
9.1.13
10.0.9
9.1.12-h4
10.1.4
8.1.21-h1
10.0.8-h8
9.1.12-h3
9.1.12
9.1.11-h2
9.1.3-h1
9.1.2-h1
8.1.20-h1
8.1.15-h3
8.1.14-h2
9.0.14-h3
9.0.9-h1
9.0.14-h4
9.1.11-h3
10.0.8-h4
8.1.21
10.1.3
8.1.20
9.0.15
9.1.11
10.1.2
10.1.1
10.1.0
10.0.8
10.0.7
10.0.6
10.0.5
10.0.4
10.0.3
10.0.2
9.0.14
9.1.10
8.1.19
9.0.13
9.1.9
9.1.8
9.1.7
9.1.6
9.0.12
8.1.18
8.1.17
9.0.11
9.1.5
9.1.4
10.0.1
9.0.10
8.1.16
5.0.5
5.0.4
5.0.3
5.0.2
4.1.12
4.1.11
5.0.0-h1
5.0.0
4.1.10
4.1.9
4.1.8-h3
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
3.1.10
4.1.2
4.1.1
4.0.8
4.1.0
3.1.9
4.0.7
4.0.6
4.0.5
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
5.1.9
5.1.8
5.1.7
5.1.6
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
7.0
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0
5.1
7.0.5-h2
10.0.0
8.1.15
9.1.3
9.2.0
9.0.9
9.0.8
8.1.14
8.0.21
7.1.26
8.0
9.1.1
9.1.0
9.1.2
9.0.6
9.0.7
8.1.13
9.0
8.1
7.1
9.1
9.0.5-h3
9.0.3-h2
8.1.12
9.0.5
9.0.4
8.0.20
7.1.25
8.1.11
8.1.10
9.0.2-h4
8.1.8-h4
8.0.19-h1
7.1.24-h1
9.0.3
9.0.2
9.0.1
9.0.0
9.0.3-h3
8.1.9-h4
8.1.9
8.1.8-h5
8.1.8
8.1.7
8.1.6-h2
8.1.4-h2
8.1.0
8.0.19
8.0.18
8.0.17
8.0.16
8.0.13
8.0.11-h1
8.0.6-h3
8.0.4-h2
8.0.3-h4
7.1.24
7.1.23
7.1.20
7.1.18
7.1.16
7.1.15
7.1.9-h4
7.1.4-h2
8.1.6
8.1.5
8.0.15
8.0.14
7.1.22
7.1.21
8.1.4
8.1.3
7.1.19
8.0.12
8.1.2
8.1.1
7.1.17
6.1.21
8.0.11
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
7.1.14
7.0.19
6.1.19
8.0.4
8.0.5
7.1.13
7.1.12
7.0.18
7.0.17
8.0.3
8.0.2
8.0.1
8.0.0
7.1.11
7.1.10
7.1.9
7.1.8
7.1.7
7.1.6
7.1.0
7.0.16
7.0.15
7.0.14
7.0.13
7.0.12
6.1.18
6.1.17
6.1.16
6.1.13
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
7.0.10
6.1.14
7.1.5
7.0.11
6.1.15
6.0.15
5.1.13
5.0.20
6.1.12
6.0.14
5.0.19
6.1.0
6.0.x
5.1.12
5.1.x
5.0.x
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
7.1.4
7.1.3
7.1.2
7.0.9
7.0.8
7.0.5
7.0.7
5.1.11
7.1.1
7.0.6
6.1.11
6.0.13
5.0.18
Vulnerabilities (254)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131773 - Out-of-bounds write CVE-2026-0263 |
CWE-787 | High | 11.1.4-h33, 11.1.6-h32, 11.1.7-h6, 11.1.10-h25, 11.1.13-h5, 11.1.15, 11.2.4-h17, 11.2.7-h13, 11.2.10-h6, 11.2.12, 12.1.4-h5, 12.1.7 | 19.05.2026 |
SB2026051910 |
||
| #VU131772 - Heap-based Buffer Overflow CVE-2026-0264 |
CWE-122 | High | 10.2.7-h34, 10.2.10-h36, 10.2.13-h21, 10.2.16-h7, 10.2.18-h6, 11.1.4-h33, 11.1.6-h32, 11.1.7-h6, 11.1.10-h25, 11.1.13-h5, 11.1.15, 11.2.4-h17, 11.2.7-h13, 11.2.10-h6, 11.2.12, 12.1.4-h5, 12.1.7 | 19.05.2026 |
SB2026051910 |
||
| #VU131771 - Improper Verification of Cryptographic Signature CVE-2026-0265 |
CWE-347 | High | 10.2.7-h34, 10.2.10-h36, 10.2.13-h21, 10.2.16-h7, 10.2.18-h6, 11.1.4-h33, 11.1.6-h32, 11.1.7-h6, 11.1.10-h25, 11.1.13-h5, 11.1.15, 11.2.4-h17, 11.2.7-h13, 11.2.10-h6, 11.2.12, 12.1.4-h5, 12.1.7 | 19.05.2026 |
SB2026051910 |
||
| #VU130217 - Out-of-bounds write CVE-2026-0300 |
CWE-787 | Critical | 10.2.10-h36, 10.2.16-h7, 10.2.18-h6, 11.1.4-h33, 11.1.6-h32, 11.1.10-h25, 11.1.13-h5, 11.2.7-h13, 11.2.10-h6, 12.1.4-h5 | 06.05.2026 |
SB2026050606 |
||
| #VU122750 - Improper Check for Unusual or Exceptional Conditions CVE-2026-0229 |
CWE-754 | Medium | 11.2.10, 12.1.4 | 12.02.2026 |
SB2026021222 |
||
| #VU122749 - Improper Certificate Validation CVE-2026-0228 |
CWE-295 | Medium | 10.2.17, 11.1.11, 11.2.8 | 12.02.2026 |
SB2026021223 |
||
| #VU121528 - Improper Check for Unusual or Exceptional Conditions CVE-2026-0227 |
CWE-754 | Medium | 10.2.7-h32, 10.2.10-h30, 10.2.13-h18, 10.2.16-h6, 10.2.18-h1, 11.1.4-h27, 11.1.6-h23, 11.1.10-h9, 11.1.13, 11.2.4-h15, 11.2.7-h8, 11.2.10-h2, 12.1.4 | 14.01.2026 |
SB20260114185 |
||
| #VU118460 - Improper Check for Unusual or Exceptional Conditions CVE-2025-4619 |
CWE-754 | Medium | 10.2.7-h24, 10.2.8-h21, 10.2.9-h21, 10.2.10-h14, 10.2.11-h12, 10.2.12-h6, 10.2.13-h3, 10.2.14, 11.1.2-h18, 11.1.4-h13, 11.1.6-h1, 11.1.7, 11.2.2-h2, 11.2.3-h6, 11.2.4-h4, 11.2.5 | 12.11.2025 |
SB20251112168 |
||
| #VU116857 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-4615 |
CWE-78 | Low | 10.2.17, 11.1.11, 11.2.8 | 09.10.2025 |
SB2025100914 |
||
| #VU116855 - Exposure of Sensitive System Information to an Unauthorized Control Sphere CVE-2025-4614 |
CWE-497 | Low | 10.2.17, 11.1.12, 11.2.8 | 09.10.2025 |
SB2025100913 |
||
| #VU114076 - Cleartext Storage of Sensitive Information CVE-2025-2182 |
CWE-312 | Low | 11.1.10, 11.2.8 | 14.08.2025 |
SB2025081417 |
||
| #VU111103 - Command injection CVE-2025-4231 |
CWE-77 | Low | 10.2.8, 11.0.3 | 12.06.2025 |
SB2025061232 |
||
| #VU111102 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-4230 |
CWE-78 | Low | 10.1.14-h15, 10.2.14, 11.1.10, 11.2.6 | 12.06.2025 |
SB2025061231 |
||
| #VU111101 - Exposure of Sensitive System Information to an Unauthorized Control Sphere CVE-2025-4229 |
CWE-497 | Medium | 10.2.17, 11.1.10 | 12.06.2025 |
SB2025061230 |
||
| #VU109209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-0137 |
CWE-79 | Low | 10.1.14-h14, 10.2.13, 11.1.8, 11.2.5 | 15.05.2025 |
SB2025051550 |
||
| #VU109208 - Cleartext Transmission of Sensitive Information CVE-2025-0136 |
CWE-319 | Medium | 10.1.14-h14, 10.2.11, 11.0.7, 11.1.5 | 15.05.2025 |
SB2025051549 |
||
| #VU109206 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-0133 |
CWE-79 | Low | 10.2.17, 11.1.11, 11.2.8 | 15.05.2025 |
SB2025051548 |
||
| #VU109205 - Improper Check for Unusual or Exceptional Conditions CVE-2025-0130 |
CWE-754 | High | 11.1.6-h1, 11.1.7-h2, 11.1.8, 11.2.5 | 15.05.2025 |
SB2025051547 |
||
| #VU107408 - Session Fixation CVE-2025-0126 |
CWE-384 | High | 10.1.14-h11, 10.2.4-h25, 10.2.9-h13, 10.2.10-h6, 10.2.11, 11.0.6, 11.1.5, 11.2.3 | 14.04.2025 |
SB2025041421 |
||
| #VU107401 - External Control of File Name or Path CVE-2025-0124 |
CWE-73 | Low | 10.1.14-h11, 10.2.10, 11.0.6, 11.1.5, 11.2.1 | 14.04.2025 |
SB2025041422 |
Showing elements 21 - 40 out of 254