Read the docs

CyberArk Software, a Palo Alto Networks Company

Records387All Threatist records
Exploited (KEV)20In CISA KEV
CVSS critical45CVSS 9.0–10.0
CVSS high137CVSS 7.0–8.9

Exploited now

CyberArk Software, a Palo Alto Networks Company records in CISA KEV
TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74173 Palo Alto Networks PAN-OS Code Injection Vulnerability Priority CRITICAL 96KEV 2026-10-14TI-2026-00197 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Priority CRITICAL 93KEV 2026-05-29TI-2026-00239 Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability Priority CRITICAL 99KEV 2026-05-06TI-2018-10499 Linux Kernel Integer Overflow Vulnerability Priority CRITICAL 93KEV 2026-01-26

Components

Products in the NVD configurations · select one to filter the records
Pan-os 238 records CRITICAL Globalprotect 43 records HIGH Cortex Xdr Agent 20 records LOW Expedition 16 records CRITICAL Prisma Access Agent 12 records LOW Cortex Xsoar 11 records MEDIUM Prisma Access 9 records CRITICAL Prisma Browser 6 records LOW

Records

6 records in Prisma Browser · all components

TI-2026-00180 CVE-2026-0236 · GHSA-jf7x-wmp8-3g54

Prisma Browser: Code Injection Enables Security Controls Bypass

Priority LOW 33

A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple…

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00158 Published 2026-05-13 Fixed in 146.16.6.165 CWE-94
TI-2026-00179 CVE-2026-0235 · GHSA-8q7v-5p8j-cfcg

Prisma Browser: Access and Data Rule Bypass

Priority LOW 25

A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies.

CVSS 4.0MEDIUM 5.8 Local Low privileges No interaction EPSS 0.0011 Published 2026-05-13 Fixed in 146.16.6.165 CWE-754
TI-2026-00214 CVE-2026-0275 · GHSA-vhc2-hf7g-64gj

Prisma Browser: Local Privilege Escalation on macOS

Priority LOW 12

A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local filesystem to perform actions on the device with root privilege…

CVSS 4.0LOW 2.0 Local High privileges User interaction EPSS 0.00165 Published 2026-07-09 Fixed in 150.33.2.46 CWE-269
TI-2026-00228 CVE-2026-0289 · GHSA-4gw6-969c-665w

Prisma Browser: Inappropriate Implementation in Account Protection

Priority LOW 5

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls.

CVSS 4.0LOW 0.5 Local No auth No interaction EPSS 0.00308 Published 2026-08-13 Fixed in 150.49.4.125 CWE-522
TI-2026-00229 CVE-2026-0290 · GHSA-6h9m-8253-wrfx

Prisma Browser: Sensitive Information Disclosure Vulnerability

Priority LOW 4

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data.

CVSS 4.0LOW 0.5 Local No auth No interaction EPSS 0.00147 Published 2026-08-13 Fixed in 148.18.4.217 CWE-522
Open these records in search →