Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

Palo Alto Networks: actively exploited vulnerabilities

15 vulnerabilities in Palo Alto Networks products (PAN-OS / GlobalProtect, Expedition) are in CISA’s catalog of exploited vulnerabilities. Last added: May 29, 2026.

Palo Alto Networks security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Palo Alto Networks category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

Follow a single Palo Alto Networks product (PAN-OS / GlobalProtect, Expedition…) rather than the whole brand.

  • PAN-OS / GlobalProtect12 vulnerabilities, Firewalls and VPNs
  • Expedition3 vulnerabilities, Firewalls and VPNs

Name used by CISA: Palo Alto Networks. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Palo Alto Networks list.

  1. Rank 1

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2026-0300

    Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

    CVSS severity 9.8critical

    Added May 6, 2026

  2. Rank 2

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2026-0257

    Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 9.1critical

    Added May 29, 2026

  3. Rank 3

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2024-3400

    Palo Alto Networks PAN-OS Command Injection Vulnerability

    Ransomware

    CVSS severity 10.0critical

    Added Apr 12, 2024

  4. Rank 4

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2020-2021

    Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

    RansomwareCVE from 2020, added in 2022

    CVSS severity 10.0critical

    Added Mar 25, 2022

  5. Rank 5

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2024-0012

    Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 18, 2024

  6. Rank 6

    Palo Alto Networks ExpeditionCVE-2024-5910

    Palo Alto Networks Expedition Missing Authentication Vulnerability

    CVSS severity 9.8critical

    Added Nov 7, 2024

  7. Rank 7

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2017-15944

    Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 9.8critical

    Added Aug 18, 2022

  8. Rank 8

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2025-0108

    Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

    CVSS severity 9.1critical

    Added Feb 18, 2025

  9. Rank 9

    Palo Alto Networks ExpeditionCVE-2024-9465

    Palo Alto Networks Expedition SQL Injection Vulnerability

    CVSS severity 9.1critical

    Added Nov 14, 2024

  10. Rank 10

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2022-0028

    Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability

    CVSS severity 8.6high

    Added Aug 22, 2022

Show 5 more vulnerabilities
  1. Rank 11

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2019-1579

    Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

    RansomwareCVE from 2019, added in 2022

    CVSS severity 8.1high

    Added Jan 10, 2022

  2. Rank 12

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2024-3393

    Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

    CVSS severity 7.5high

    Added Dec 30, 2024

  3. Rank 13

    Palo Alto Networks ExpeditionCVE-2024-9463

    Palo Alto Networks Expedition OS Command Injection Vulnerability

    CVSS severity 7.5high

    Added Nov 14, 2024

  4. Rank 14

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2024-9474

    Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

    Ransomware

    CVSS severity 7.2high

    Added Nov 18, 2024

  5. Rank 15

    Palo Alto Networks PAN-OS / GlobalProtectCVE-2025-0111

    Palo Alto Networks PAN-OS File Read Vulnerability

    CVSS severity 6.5medium

    Added Feb 20, 2025

Follow and verify

Get new Palo Alto Networks vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.