How many CVEs does Palo Alto Networks have?

Palo Alto Networks has 423 published CVE records since 2010, including 127 in the last two years.

How many Palo Alto Networks CVEs are in CISA KEV?

Yes — 17 of Palo Alto Networks's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which Palo Alto Networks products have the most CVEs?

The Palo Alto Networks products with the most published CVEs are PAN-OS, Prisma Access, Cloud NGFW, GlobalProtect, GlobalProtect app.

What are the most common weakness types in Palo Alto Networks CVEs?

Palo Alto Networks's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-754 (Improper Check for Unusual or Exceptional Conditions), CWE-532 (Insertion of Sensitive Information into Log File).

How many critical Palo Alto Networks vulnerabilities are there?

Palo Alto Networks has 46 critical and 142 high-severity CVEs.

What is the average severity of Palo Alto Networks CVEs?

The average CVSS base score across Palo Alto Networks's scored CVEs is 6.6.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

423 CVEs

17 in CISA KEV

Palo Alto Networks Vulnerabilities

Name: Palo Alto Networks vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Palo Alto Networks.

423

Total CVEs

Published

17

In CISA KEV

Exploited in the wild

35

Public exploits

PoC or exploit code

6.6

Avg CVSS

2010–2026

Overview

Palo Alto Networks has 423 published CVE records since 2010, of which 17 are in CISA's Known Exploited Vulnerabilities catalog and 35 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Palo Alto Networks products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Palo Alto Networks's vulnerability posture, as a share of its 423 published CVEs.

Average CVSS: 6.6
Critical / high: 44%
Actively exploited (KEV): 4%
Public exploit available: 8%
Patch available: 84%

Severity and exploitation

How the CVSS severity of Palo Alto Networks's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical46

High142

Medium208

Low27

In CISA’s Known Exploited Vulnerabilities catalog

17

17 of Palo Alto Networks's CVEs are confirmed exploited in the wild.

Public exploits

35

35 of Palo Alto Networks's CVEs have a known public exploit available.

Most affected products

The Palo Alto Networks products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Palo Alto Networks CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Palo Alto Networks CVE records.

Disclosure activity by year

How many Palo Alto Networks CVEs were published each year.

2019

24

2020

67

2021

34

2022

21

2023

20

2024

57

2025

59

2026

68

Latest Palo Alto Networks CVEs

The most recently disclosed vulnerabilities affecting Palo Alto Networks.

Prisma Browser: Local Privilege Escalation on macOS
CWE-269
Low · CVSS 2.0
EPSS 0.1%2026-07-09
Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability
CWE-269
Low · CVSS 1.1
EPSS 0.1%2026-07-09
Prisma Access Agent: Improper Certificate Validation on iOS
CWE-295
Medium · CVSS 5.7
EPSS 0.2%2026-07-09
Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows
CWE-693
Medium · CVSS 5.8
EPSS 0.2%2026-07-09
PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities
CWE-79
Low · CVSS 1.3
EPSS 0.6%2026-07-09
PAN-OS: IPv6 Firewall Policy Bypass
CWE-131
Low · CVSS 1.7
EPSS 0.3%2026-07-09
PAN-OS: Information Disclosure Vulnerability in Management Web Interface
CWE-524
Low · CVSS 2.1
EPSS 0.3%2026-07-09
PAN-OS: File Deletion Vulnerability in Management Web Interface
CWE-20
Low · CVSS 2.7
EPSS 0.3%2026-07-09
PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)
CWE-306
Medium · CVSS 4.5
EPSS 0.3%2026-07-09
PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)
CWE-74
Medium · CVSS 4.7
EPSS 0.4%2026-07-09
PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface
CWE-918
Medium · CVSS 4.7
EPSS 0.4%2026-07-09
PAN-OS: Authenticated Command Injection in CLI
CWE-78
Medium · CVSS 6.0
EPSS 1.4%2026-07-09

Track new Palo Alto Networks CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Palo Alto Networks CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

QEMU434 CVEs tensorflow434 CVEs cpanel429 CVEs Wikimedia Foundation429 CVEs GPAC426 CVEs MariaDB424 CVEs Rockwell Automation421 CVEs EMC421 CVEs

Browse all vendors

Frequently asked questions

Common questions about Palo Alto Networks vulnerabilities.

How many CVEs does Palo Alto Networks have?: Palo Alto Networks has 423 published CVE records since 2010, including 127 in the last two years.
How many Palo Alto Networks CVEs are in CISA KEV?: Yes — 17 of Palo Alto Networks's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Which Palo Alto Networks products have the most CVEs?: The Palo Alto Networks products with the most published CVEs are PAN-OS, Prisma Access, Cloud NGFW, GlobalProtect, GlobalProtect app.
What are the most common weakness types in Palo Alto Networks CVEs?: Palo Alto Networks's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-754 (Improper Check for Unusual or Exceptional Conditions), CWE-532 (Insertion of Sensitive Information into Log File).
Are there public exploits for Palo Alto Networks vulnerabilities?: Yes — 35 of Palo Alto Networks's CVEs have a known public exploit.
How many critical Palo Alto Networks vulnerabilities are there?: Palo Alto Networks has 46 critical and 142 high-severity CVEs.
What is the average severity of Palo Alto Networks CVEs?: The average CVSS base score across Palo Alto Networks's scored CVEs is 6.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Palo Alto Networks vulnerabilities

Monitor new Palo Alto Networks vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing