Patchfirst
Patchfirst

Vendor

Palo Alto Networks

16 of 20 Palo Alto Networks CVEs in Patchfirst (80%) are in of vulnerabilities exploited in the wild, 6 of them used by ransomware.

CVEs
20
In CISA KEV
1680%
Known ransomware use
6
Median days to KEV
10
from publication
Latest KEV listing
14 Oct 2026
Watch Palo Alto Networks Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • PAN-OS In KEV: 13 CVEs: 15
  • Expedition In KEV: 3 CVEs: 4
  • Cloud NGFW In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with Palo Alto Networks CVEs
Open in ATT&CK Navigator

Counts are Palo Alto Networks CVEs linked to the technique. Each link’s provenance is on the CVE page.

Palo Alto Networks CVEs

20 CVEs, by priority
  1. CVE-2026-0257Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
    Palo Alto Networks · PAN-OSKEVRansomwarePublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1133External Remote Services4 reports
    95.0%Top 0.14%
    93.3priority
  2. CVE-2024-3400Palo Alto Networks PAN-OS Command Injection Vulnerability
    Palo Alto Networks · PAN-OSKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter3 reports
    >99.9%Top 0.01%
    87.7priority
  3. CVE-2026-0300Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
    Palo Alto Networks · PAN-OSKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    41.7%Top 1.3%
    84.6priority
  4. CVE-2024-0012Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
    Palo Alto Networks · PAN-OSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    99.8%Top 0.04%
    79.9priority
  5. CVE-2019-1579Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
    Palo Alto Networks · PAN-OSKEVRansomwarePublic exploitHigh · 8.1T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    44.2%Top 1.2%
    78.4priority
  6. CVE-2020-2021Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
    Palo Alto Networks · PAN-OSKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    4.4%Top 8.8%
    78.2priority
  7. CVE-2024-9474Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
    Palo Alto Networks · PAN-OSKEVRansomwarePublic exploitHigh · 7.2T1078Valid AccountsT1068Exploitation for Privilege Escalation
    93.8%Top 0.16%
    78.0priority
  8. CVE-2026-0322Palo Alto Networks PAN-OS Code Injection Vulnerability
    Palo Alto Networks · PAN-OSKEVPublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter
    1.7%Top 22%
    73.6priority
  9. CVE-2024-5910Palo Alto Networks Expedition Missing Authentication Vulnerability
    Palo Alto Networks · ExpeditionKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    91.7%Top 0.19%
    69.8priority
  10. CVE-2017-15944Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
    Palo Alto Networks · PAN-OSKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    98.3%Top 0.08%
    69.8priority
  11. CVE-2025-0108Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
    Palo Alto Networks · PAN-OSKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1055Process Injection+1 more
    98.1%Top 0.09%
    69.4priority
  12. CVE-2024-9465Palo Alto Networks Expedition SQL Injection Vulnerability
    Palo Alto Networks · ExpeditionKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1005Data from Local System
    99.6%Top 0.05%
    69.4priority
  13. CVE-2024-9463Palo Alto Networks Expedition OS Command Injection Vulnerability
    Palo Alto Networks · ExpeditionKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    98.5%Top 0.08%
    68.2priority
  14. CVE-2020-2034PAN-OS: OS command injection vulnerability in GlobalProtect portal
    Palo Alto Networks · PAN-OSPublic exploitHigh · 8.1
    7.2%Top 5.7%
    65.9priority
  15. CVE-2025-0107Expedition: OS Command Injection Vulnerability
    Palo Alto Networks · Cloud NGFWPublic exploitHigh · 7.7
    78.4%Top 0.42%
    65.3priority
  16. CVE-2024-3393Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
    Palo Alto Networks · PAN-OSKEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    29.1%Top 1.8%
    62.9priority
  17. CVE-2022-0028Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
    Palo Alto Networks · PAN-OSKEVHigh · 8.6T1190Exploit Public-Facing ApplicationT1498Network Denial of Service
    2.7%Top 14%
    61.2priority
  18. CVE-2025-0111Palo Alto Networks PAN-OS File Read Vulnerability
    Palo Alto Networks · PAN-OSKEVMedium · 6.5T1068Exploitation for Privilege EscalationT1005Data from Local System
    2.0%Top 19%
    58.7priority
  19. CVE-2024-9464Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure
    Palo Alto Networks · ExpeditionPublic exploitCritical · 9.3
    82.6%Top 0.33%
    31.4priority
  20. CVE-2020-2038PAN-OS: OS command injection vulnerability in the management web interface
    Palo Alto Networks · PAN-OSPublic exploitHigh · 7.2
    86.2%Top 0.27%
    31.4priority
↑ ↓ chooseEnter openEsc close