Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: Palo Alto Networks PAN-OS 10.2.18-h6, 10.2.16-h7, 10.2.13-h21, 10.2.10-h36, 10.2.7-h34, 11.1.15, 11.1.13-h5, 11.1.10-h25, 11.1.7-h6, 11.1.6-h32, 11.1.4-h33 and 2 more versions Clear all filters
TI-2026-00198 CVE-2026-0258 · GHSA-xpv6-xwmp-4m43

PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching

Priority LOW 22

A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destin…

CVSS 4.0MEDIUM 4.8 Network No auth No interaction EPSS 0.00328 Published 2026-05-13 Fixed in All, 12.1.7 +16 CWE-918
TI-2026-00200 CVE-2026-0261 · GHSA-3jxr-6794-xw26

PAN-OS: Authenticated Admin Command Injection Vulnerability

Priority LOW 32

Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user.

CVSS 4.0MEDIUM 6.1 Network High privileges No interaction EPSS 0.01403 Published 2026-05-13 Fixed in All, 12.1.7 +16 CWE-78
TI-2026-00201 CVE-2026-0262 · GHSA-3mc4-hxgv-pc7g

PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing

Priority LOW 29

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network tr…

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00359 Published 2026-05-13 Fixed in All, 12.1.7 +16 CWE-754
TI-2026-00203 CVE-2026-0264 · GHSA-99hw-j87x-3cgm

PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution

Priority LOW 35

A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a denial of service (DoS) condition (all PAN…

CVSS 4.0HIGH 7.2 Network No auth No interaction EPSS 0.00597 Published 2026-05-13 Fixed in All, 12.1.7 +16 CWE-122
TI-2026-00204 CVE-2026-0265 · GHSA-qcp7-r34x-6gv6

PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled

Priority LOW 36

An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service (CAS) is enabled.

CVSS 4.0HIGH 7.2 Network No auth No interaction EPSS 0.01053 Published 2026-05-13 Fixed in All, 12.1.7 +16 CWE-347