P
Vendor security profile6 actively exploited CVEs
paloaltonetworks
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs71
Critical6
CISA KEV6
Public exploit6
Patch rate%0
Avg. CVSS5.9
12-month vulnerability rate
0
0
0
0
0
3
25
10
14
12
0
1
CVE KEV
CVE severity distribution
71toplam CVE
Critical6 (8%)
High22 (31%)
Medium31 (44%)
Low12 (17%)
Patch and exploitation view
%0
Verified patch
%8
CISA KEV
%8
Public exploit
0Patch available
0Partial
4Workaround
0Vendor: no patch
67Unknown
Latest vulnerabilities
8.6
CVE-2026-0322 Actively exploitedPAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
Workaround Public Exploits:1EPSS %1
1.7
CVE-2026-0301PAN-OS: Information Disclosure Vulnerability in URL Filtering
Patch status unknownEPSS %0
5.9
CVE-2026-0299GlobalProtect App: Local Privilege Escalation Vulnerabilities
Patch status unknownEPSS %0
5.2
CVE-2026-0298GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)
Patch status unknownEPSS %0
5.2
CVE-2026-0297GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
Patch status unknownEPSS %0
4.5
CVE-2026-0296GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
Patch status unknownEPSS %0
4.1
CVE-2026-0295GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
Patch status unknownEPSS %0
6.0
CVE-2026-0294Prisma Access Agent: Local Privilege Escalation
Patch status unknownEPSS %0
5.6
CVE-2026-0293Prisma Access Agent: Anti-Tamper Protection Bypass on Windows
Patch status unknownEPSS %0
2.1
CVE-2026-0292Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows
Patch status unknownEPSS %0