CVE-2026-0302Checkov by Prisma Cloud: OS Command Injection Vulnerability Exploitation status Not known exploited Fix Affected product C Checkov by Prisma Cloud Published 09/10/2026 Severity Low CVE-2026-0303Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File Exploitation status Not known exploited Fix Affected product C Checkov by Prisma Cloud Published 09/10/2026 Severity Low CVE-2026-0304Cortex XDR Broker VM: Privilege Escalation Vulnerability Exploitation status Not known exploited Fix Affected product C Cortex XDR Broker VM Published 09/10/2026 Severity Medium CVE-2026-0305Prisma Access Agent: Information Disclosure Vulnerability on Linux Exploitation status Not known exploited Fix Affected product P Prisma Access Agent Published 09/10/2026 Severity Medium CVE-2026-0306Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows Exploitation status Not known exploited Fix Affected product P Prisma Access Agent Published 09/10/2026 Severity Medium CVE-2026-0307GlobalProtect App: Local Privilege Escalation Vulnerabilities Exploitation status Not known exploited Fix Affected product G GlobalProtect App Published 09/10/2026 Severity Medium CVE-2026-0308PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface Exploitation status Not known exploited Fix Affected product P PAN-OS Published 09/10/2026 Severity Low CVE-2026-0309PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration Exploitation status Not known exploited Fix Affected product P PAN-OS Published 09/10/2026 Severity Medium CVE-2026-0310PAN-OS: Buffer Overflow Vulnerability via XML Processing Exploitation status Not known exploited Fix Affected product C Cloud NGFW Published 09/10/2026 Severity High CVE-2026-0301PAN-OS: Information Disclosure Vulnerability in URL Filtering Exploitation status Not known exploited Fix Affected product C Cloud NGFW Published 08/13/2026 Severity Low CVE-2026-0299GlobalProtect App: Local Privilege Escalation Vulnerabilities Exploitation status Not known exploited Fix Affected product G GlobalProtect App Published 08/13/2026 Severity Medium CVE-2026-0298GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) Exploitation status Not known exploited Fix Affected product G GlobalProtect App Published 08/13/2026 Severity Medium CVE-2026-0297GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake Exploitation status Not known exploited Fix Affected product G GlobalProtect App Published 08/13/2026 Severity Medium CVE-2026-0296GlobalProtect App: Improper Certificate Validation Bypass Vulnerability Exploitation status Not known exploited Fix Affected product G GlobalProtect App Published 08/13/2026 Severity Medium CVE-2026-0295GlobalProtect App: Local Privilege Escalation via Race Condition on macOS Exploitation status Not known exploited Fix Affected product G GlobalProtect App Published 08/13/2026 Severity Medium CVE-2026-0294Prisma Access Agent: Local Privilege Escalation Exploitation status Not known exploited Fix Affected product P Prisma Access Agent Published 08/13/2026 Severity Medium CVE-2026-0293Prisma Access Agent: Anti-Tamper Protection Bypass on Windows Exploitation status Not known exploited Fix Affected product P Prisma Access Agent Published 08/13/2026 Severity Medium CVE-2026-0292Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows Exploitation status Not known exploited Fix Affected product P Prisma Access Agent Published 08/13/2026 Severity Low CVE-2026-0291Prisma Access Agent: Authenticated Limited File Deletion on Linux Exploitation status Not known exploited Fix Affected product P Prisma Access Agent Published 08/13/2026 Severity Low CVE-2026-0290Prisma Browser: Sensitive Information Disclosure Vulnerability Exploitation status Not known exploited Fix Affected product P Prisma Browser Published 08/13/2026 Severity Low CVE-2026-0289Prisma Browser: Inappropriate Implementation in Account Protection Exploitation status Not known exploited Fix Affected product P Prisma Browser Published 08/13/2026 Severity Low CVE-2026-0275Prisma Browser: Local Privilege Escalation on macOS Exploitation status Not known exploited Fix Affected product P Prisma Browser Published 07/09/2026 Severity Low CVE-2026-0276Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability Exploitation status Not known exploited Fix Affected product C Cortex XDR Broker VM Published 07/09/2026 Severity Low CVE-2026-0277Prisma Access Agent: Improper Certificate Validation on iOS Exploitation status Not known exploited Fix Affected product P Prisma Access Agent Published 07/09/2026 Severity Medium CVE-2026-0278Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows Exploitation status Not known exploited Fix Affected product P Prisma Access Agent Published 07/09/2026 Severity Medium CVE-2026-0279PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities Exploitation status Not known exploited Fix Affected product P PAN-OS Published 07/09/2026 Severity Low CVE-2026-0280PAN-OS: IPv6 Firewall Policy Bypass Exploitation status Not known exploited Fix Affected product P PAN-OS Published 07/09/2026 Severity Low CVE-2026-0281PAN-OS: Information Disclosure Vulnerability in Management Web Interface Exploitation status Not known exploited Fix Affected product P PAN-OS Published 07/09/2026 Severity Low CVE-2026-0282PAN-OS: File Deletion Vulnerability in Management Web Interface Exploitation status Not known exploited Fix Affected product P PAN-OS Published 07/09/2026 Severity Low CVE-2026-0283PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) Exploitation status Not known exploited Fix Affected product P PAN-OS Published 07/09/2026 Severity Medium CVE-2026-0284PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN) Exploitation status Not known exploited Fix Affected product P PAN-OS Published 07/09/2026 Severity Medium CVE-2026-0285PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface Exploitation status Not known exploited Fix Affected product P PAN-OS Published 07/09/2026 Severity Medium CVE-2026-0286PAN-OS: Authenticated Command Injection in CLI Exploitation status Not known exploited Fix Affected product P PAN-OS Published 07/09/2026 Severity Medium CVE-2026-0287PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing Exploitation status Not known exploited Fix Affected product C Cloud NGFW Published 07/09/2026 Severity Medium CVE-2026-0288PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent Exploitation status Not known exploited Fix Affected product C Cloud NGFW Published 07/08/2026 Severity High CVE-2026-0274Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration Exploitation status Not known exploited Fix Affected product C Cortex XSIAM CommvaultSecurityIQ Marketplace Published 06/10/2026 Severity High CVE-2026-0273PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI Exploitation status Not known exploited Fix Affected product P PAN-OS Published 06/10/2026 Severity Medium CVE-2026-0272PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI) Exploitation status Not known exploited Fix Affected product P PAN-OS Published 06/10/2026 Severity Medium CVE-2026-0271Prisma Access Agent: Local Privilege Escalation by Authorized Users Exploitation status Not known exploited Fix Affected product P Prisma Access Agent Published 06/10/2026 Severity Medium CVE-2026-0270Cortex XSOAR: Path Traversal Vulnerability Exploitation status Not known exploited Fix Affected product C Cortex XSOAR Published 06/10/2026 Severity Medium CVE-2026-0269PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing Exploitation status Not known exploited Fix Affected product P PAN-OS Published 06/10/2026 Severity Medium CVE-2026-0268Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux Exploitation status Not known exploited Fix Affected product P Prisma Access Agent Published 06/10/2026 Severity Medium CVE-2026-0267GlobalProtect App: Information Exposure Vulnerability on macOS Exploitation status Not known exploited Fix Affected product G GlobalProtect App Published 06/10/2026 Severity Medium CVE-2026-0266PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface Exploitation status Not known exploited Fix Affected product P PAN-OS Published 06/10/2026 Severity Low CVE-2026-0243Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet Exploitation status Not known exploited Fix Affected product P Prisma SD-WAN ION Published 05/13/2026 Severity Medium CVE-2026-0248Prisma Access Agent: Improper Certificate Validation Vulnerability Exploitation status Not known exploited Fix Affected product P Prisma Access Agent Published 05/13/2026 Severity Medium CVE-2026-0242Trust Protection Foundation: SQL Injection Vulnerability Exploitation status Not known exploited Fix Affected product T Trust Protection Foundation Published 05/13/2026 Severity Medium CVE-2026-0244Prisma SD-WAN: Improper Certificate Validation Vulnerability Exploitation status Not known exploited Fix Affected product P Prisma SD-WAN ION Published 05/13/2026 Severity Medium CVE-2026-0241Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities Exploitation status Not known exploited Fix Affected product T Trust Protection Foundation Published 05/13/2026 Severity Medium CVE-2026-0245Prisma Access Agent: Information Disclosure Vulnerabilities Exploitation status Not known exploited Fix Affected product P Prisma Access Agent Published 05/13/2026 Severity Medium CVE-2026-0240Trust Protection Foundation: Sensitive Information Disclosure Vulnerability Exploitation status Not known exploited Fix Affected product T Trust Protection Foundation Published 05/13/2026 Severity Medium CVE-2026-0246Prisma Access Agent: Local Privilege Escalation Vulnerability Exploitation status Not known exploited Fix Affected product P Prisma Access Agent Published 05/13/2026 Severity Medium CVE-2026-0247Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities Exploitation status Not known exploited Fix Affected product P Prisma Access Agent Published 05/13/2026 Severity Medium CVE-2026-0249GlobalProtect App: Certificate Validation Bypass Vulnerabilities Exploitation status Not known exploited Fix Affected product G GlobalProtect App Published 05/13/2026 Severity Medium CVE-2026-0239Chronosphere Chronocollector Information Disclosure Vulnerability Exploitation status Not known exploited Fix Affected product C Chronosphere Chronocollector Published 05/13/2026 Severity Medium CVE-2026-0250GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway Exploitation status Not known exploited Fix Affected product G GlobalProtect App Published 05/13/2026 Severity Medium CVE-2026-0238Broker VM: Improper Input Validation in Broker VM Certificate and Key Fields Exploitation status Not known exploited Fix Affected product B Broker VM Published 05/13/2026 Severity Low CVE-2026-0251GlobalProtect App: Local Privilege Escalation Vulnerabilities Exploitation status Not known exploited Fix Affected product G GlobalProtect App Published 05/13/2026 Severity Medium CVE-2026-0256PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface Exploitation status Not known exploited Fix Affected product P PAN-OS Published 05/13/2026 Severity Medium CVE-2026-0257PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities Exploitation status KEV Fix Affected product P PAN-OS Published 05/13/2026 Severity High CVE-2026-0235Prisma Browser: Access and Data Rule Bypass Exploitation status Not known exploited Fix Affected product P Prisma Browser Published 05/13/2026 Severity Medium CVE-2026-0258PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching Exploitation status Not known exploited Fix Affected product P PAN-OS Published 05/13/2026 Severity Medium CVE-2026-0259WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B) Exploitation status Not known exploited Fix Affected product W WildFire WF-500 and WF-500-B Published 05/13/2026 Severity Medium CVE-2026-0261PAN-OS: Authenticated Admin Command Injection Vulnerability Exploitation status Not known exploited Fix Affected product P PAN-OS Published 05/13/2026 Severity Medium CVE-2026-0236Prisma Browser: Code Injection Enables Security Controls Bypass Exploitation status Not known exploited Fix Affected product P Prisma Browser Published 05/13/2026 Severity High CVE-2026-0262PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing Exploitation status Not known exploited Fix Affected product P PAN-OS Published 05/13/2026 Severity Medium CVE-2026-0237Prisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass Exploitation status Not known exploited Fix Affected product P Prisma Browser Published 05/13/2026 Severity High CVE-2026-0263PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing Exploitation status Not known exploited Fix Affected product P PAN-OS Published 05/13/2026 Severity High CVE-2026-0264PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution Exploitation status Not known exploited Fix Affected product P PAN-OS Published 05/13/2026 Severity High CVE-2026-0265PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled Exploitation status Not known exploited Fix Affected product P PAN-OS Published 05/13/2026 Severity High CVE-2026-0300PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal Exploitation status KEV Fix Affected product P PAN-OS Published 05/06/2026 Severity Critical CVE-2026-0232Cortex XDR Agent: Local Administrator can disable the agent on Windows Exploitation status Not known exploited Fix Affected product C Cortex XDR Agent Published 04/13/2026 Severity Medium CVE-2026-0233Autonomous Digital Experience Manager: Improper validation of ADEM certificate Exploitation status Not known exploited Fix Affected product A Autonomous Digital Experience Manager Published 04/13/2026 Severity Low CVE-2026-0234Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration Exploitation status Not known exploited Fix Affected product C Cortex XSOAR Microsoft Teams Marketplace Published 04/13/2026 Severity High CVE-2026-0231Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability Exploitation status Not known exploited Fix Affected product C Cortex XDR Broker VM Published 03/11/2026 Severity Medium CVE-2026-0230Cortex XDR Agent: Local Administrator can disable the agent on macOS Exploitation status Not known exploited Fix Affected product C Cortex XDR Agent Published 03/11/2026 Severity Medium CVE-2026-0229PAN-OS: Denial of Service in Advanced DNS Security Feature Exploitation status Public exploit Fix Affected product P PAN-OS Published 02/11/2026 Severity Medium CVE-2026-0228PAN-OS: Improper Validation of Terminal Server Agent Certificate Exploitation status Not known exploited Fix Affected product P PAN-OS Published 02/11/2026 Severity Low CVE-2026-0227PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal Exploitation status Not known exploited Fix Affected product P PAN-OS Published 01/15/2026 Severity Medium CVE-2025-4618Prisma Browser: Sensitive Information Disclosure Vulnerability in Prisma Browser Exploitation status Not known exploited Fix Affected product P Prisma Browser Published 11/14/2025 Severity Medium CVE-2025-4617Prisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma Browser Exploitation status Not known exploited Fix Affected product P Prisma Browser Published 11/14/2025 Severity Low CVE-2025-4616Prisma Browser: Insufficient Validation of Untrusted Input Vulnerability in Prisma Browser Exploitation status Not known exploited Fix Affected product P Prisma Browser Published 11/14/2025 Severity Low CVE-2025-4619PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Packets Exploitation status Not known exploited Fix Affected product P PAN-OS Published 11/13/2025 Severity Medium CVE-2025-4615PAN-OS: Improper Neutralization of Input in the Management Web Interface Exploitation status Not known exploited Fix Affected product P PAN-OS Published 10/09/2025 Severity Medium CVE-2025-4614PAN-OS: Session Token Disclosure Vulnerability Exploitation status Not known exploited Fix Affected product P PAN-OS Published 10/09/2025 Severity Medium CVE-2025-4234Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials Exploitation status Not known exploited Fix Affected product C Cortex XDR Microsoft 365 Defender Pack Published 09/12/2025 Severity Low CVE-2025-4235User-ID Credential Agent: Cleartext Exposure of Service Account password Exploitation status Not known exploited Fix Affected product Not confirmed Published 09/12/2025 Severity High CVE-2025-2184Cortex XDR Broker VM: Secrets Shared Across Multiple Broker VM Images Exploitation status Not known exploited Fix Affected product C Cortex XDR Broker VM Published 08/13/2025 Severity Medium CVE-2025-2183GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation Exploitation status Not known exploited Fix Affected product G GlobalProtect App Published 08/13/2025 Severity Medium CVE-2025-2182PAN-OS: Firewall Clusters using the MACsec Protocol Expose the Connectivity Association Key (CAK) Exploitation status Not known exploited Fix Affected product P PAN-OS Published 08/13/2025 Severity Medium CVE-2025-2181Checkov by Prisma Cloud: Cleartext Exposure of Credentials Exploitation status Not known exploited Fix Affected product C Checkov by Prisma Cloud Published 08/13/2025 Severity Medium CVE-2025-2180Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution Exploitation status Not known exploited Fix Affected product C Checkov by Prisma Cloud Published 08/13/2025 Severity Medium CVE-2025-2179GlobalProtect App: Non Admin User Can Disable the GlobalProtect App Exploitation status Not known exploited Fix Affected product G GlobalProtect App Published 07/29/2025 Severity Medium CVE-2025-0141GlobalProtect App: Privilege Escalation (PE) Vulnerability Exploitation status Not known exploited Fix Affected product G GlobalProtect App Published 07/09/2025 Severity High CVE-2025-0140GlobalProtect App: Non Admin User Can Disable the GlobalProtect App Exploitation status Not known exploited Fix Affected product G GlobalProtect App Published 07/09/2025 Severity Medium CVE-2025-0139Autonomous Digital Experience Manager: Privilege Escalation (PE) Vulnerability Exploitation status Not known exploited Fix Affected product A Autonomous Digital Experience Manager Published 07/09/2025 Severity Medium CVE-2025-4227GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement Exploitation status Not known exploited Fix Affected product G GlobalProtect App Published 06/13/2025 Severity Low CVE-2025-4229PAN-OS: Traffic Information Disclosure Vulnerability Exploitation status Not known exploited Fix Affected product P PAN-OS Published 06/13/2025 Severity Medium CVE-2025-4228Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability Exploitation status Not known exploited Fix Affected product C Cortex XDR Broker VM Published 06/12/2025 Severity Medium CVE-2025-4230PAN-OS: Authenticated Admin Command Injection Vulnerability Through CLI Exploitation status Not known exploited Fix Affected product P PAN-OS Published 06/12/2025 Severity High 
