Skip to content
VulniPulse

Complete feed

Action required

Critical/high still unreviewed, or CISA KEV listed

Home overview

Android app · Google Play

Take your CVE monitoring with you.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

High8.5Vendor: MediumPalo Alto

High [CVE-2026-0246] Prisma Access Agent: Local Privilege Escalation Vulnerability

CVE-2026-0246 Prisma Access Agent: Local Privilege Escalation Vulnerability

CVE-2026-0246
Prisma Access
May 13, 2026
High8.5Vendor: MediumPalo Alto

High [CVE-2026-0247] Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities

CVE-2026-0247 Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities

CVE-2026-0247
Prisma Access
May 13, 2026
UnratedPalo Alto Exploited CISA KEV

Advisory [CVE-2026-0235 +151] code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its…

A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.

CVE-2026-0235CVE-2026-0235146CVE-2026-0236+149
Prisma Access
May 13, 2026
UnratedPalo Alto Exploited CISA KEV

Advisory [CVE-2026-0235 +151] race condition vulnerability in Palo Alto Networks Prisma® Browser

A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies.

CVE-2026-0235CVE-2026-0235146CVE-2026-0236+149
Prisma Access
May 13, 2026
UnratedPalo Alto Exploited CISA KEV

Advisory [CVE-2026-0235 +151] improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict…

An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.

CVE-2026-0235CVE-2026-0235146CVE-2026-0236+149
Prisma Access
May 13, 2026
Critical9.2Palo Alto

Critical [CVE-2026-0234] improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during…

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.

CVE-2026-0234
Cortex
Apr 13, 2026
High7.7Palo Alto

High [CVE-2026-0233] certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges.

CVE-2026-0233
Unclassified
Apr 13, 2026
High8.4Palo Alto

High [CVE-2026-0231] information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM

An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to obtain and modify sensitive information by triggering live terminal session via Cortex UI and modifying any configuration setting. The attacker must have network access to the Broker VM to exploit this issue.

CVE-2026-0231
Cortex
Mar 11, 2026
High8.7Palo Alto

High [CVE-2026-0229] denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® software

A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode. Cloud NGFW and Prisma Access® are not impacted by this vulnerability.

CVE-2026-0229
PAN-OSFirewallPrisma AccessCloud NGFW
Feb 11, 2026
High8.7Palo Alto

High [CVE-2026-0227] vulnerability in Palo Alto Networks PAN-OS software

A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode.

CVE-2026-0227
PAN-OSFirewallPAN-OS / Panorama
Jan 15, 2026
Critical9.3Palo Alto PoC reported CISA KEV

Critical [CVE-2024-0012 +1] PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like CVE-2024-9474. The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended best practice deployment guidelines. This issue is applicable only to PAN-OS 10.2, PAN-OS 11.0, PAN-OS 11.1, and PAN-OS 11.2 software on PA-Series, VM-Series, and CN-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma Access are not impacted by this vulnerability.

CVE-2024-0012CVE-2024-9474
PAN-OSFirewallCloud NGFWPAN-OS / Panorama
Nov 18, 2024
Medium6.9Palo Alto PoC reported CISA KEV

Medium [CVE-2024-9474] PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. This issue is applicable to PAN-OS 10.1, PAN-OS 10.2, PAN-OS 11.0, PAN-OS 11.1, and PAN-OS 11.2 software on PA-Series, VM-Series, and CN-Series firewalls and on Panorama (virtual and M-Series) and WildFire appliances. Cloud NGFW and Prisma Access are not impacted by this vulnerability.

CVE-2024-9474
PAN-OSFirewallCloud NGFWWildFire
Nov 18, 2024
High8.1Palo Alto Exploited CISA KEV

High [CVE-2019-1579] Palo Alto Networks GlobalProtect Portal/Gateway Interface: Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code

Palo Alto Networks is aware of the reported remote code execution (RCE) vulnerability in its GlobalProtect portal and GlobalProtect Gateway interface products. The issue is already addressed in prior maintenance releases. (Ref: CVE-2019-1579) Successful exploitation of this issue allows an unauthenticated attacker to execute arbitrary code. This issue affects PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier releases. PAN-OS 9.0 is not affected.

CVE-2019-1579
Unclassified
Jul 19, 2019