Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

PAN-OS Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Published	Severity
`CVE-2026-0308`PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface	Exploitation statusNot known exploited	FixYes	Published09/10/2026	SeverityLow
`CVE-2026-0309`PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration	Exploitation statusNot known exploited	FixYes	Published09/10/2026	SeverityMedium
`CVE-2026-0310`PAN-OS: Buffer Overflow Vulnerability via XML Processing	Exploitation statusNot known exploited	FixYes	Published09/10/2026	SeverityHigh
`CVE-2026-0301`PAN-OS: Information Disclosure Vulnerability in URL Filtering	Exploitation statusNot known exploited	FixYes	Published08/13/2026	SeverityLow
`CVE-2026-0279`PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities	Exploitation statusNot known exploited	FixYes	Published07/09/2026	SeverityLow
`CVE-2026-0280`PAN-OS: IPv6 Firewall Policy Bypass	Exploitation statusNot known exploited	FixYes	Published07/09/2026	SeverityLow
`CVE-2026-0281`PAN-OS: Information Disclosure Vulnerability in Management Web Interface	Exploitation statusNot known exploited	FixYes	Published07/09/2026	SeverityLow
`CVE-2026-0282`PAN-OS: File Deletion Vulnerability in Management Web Interface	Exploitation statusNot known exploited	FixYes	Published07/09/2026	SeverityLow
`CVE-2026-0283`PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)	Exploitation statusNot known exploited	FixYes	Published07/09/2026	SeverityMedium
`CVE-2026-0284`PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)	Exploitation statusNot known exploited	FixYes	Published07/09/2026	SeverityMedium
`CVE-2026-0285`PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface	Exploitation statusNot known exploited	FixYes	Published07/09/2026	SeverityMedium
`CVE-2026-0286`PAN-OS: Authenticated Command Injection in CLI	Exploitation statusNot known exploited	FixYes	Published07/09/2026	SeverityMedium
`CVE-2026-0287`PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing	Exploitation statusNot known exploited	FixYes	Published07/09/2026	SeverityMedium
`CVE-2026-0288`PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent	Exploitation statusNot known exploited	FixYes	Published07/08/2026	SeverityHigh
`CVE-2026-0273`PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI	Exploitation statusNot known exploited	FixYes	Published06/10/2026	SeverityMedium
`CVE-2026-0272`PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)	Exploitation statusNot known exploited	FixYes	Published06/10/2026	SeverityMedium
`CVE-2026-0269`PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing	Exploitation statusNot known exploited	FixYes	Published06/10/2026	SeverityMedium
`CVE-2026-0266`PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface	Exploitation statusNot known exploited	FixYes	Published06/10/2026	SeverityLow
`CVE-2026-0256`PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface	Exploitation statusNot known exploited	FixYes	Published05/13/2026	SeverityMedium
`CVE-2026-0257`PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities	Exploitation statusKEV	FixYes	Published05/13/2026	SeverityHigh
`CVE-2026-0258`PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching	Exploitation statusNot known exploited	FixYes	Published05/13/2026	SeverityMedium
`CVE-2026-0261`PAN-OS: Authenticated Admin Command Injection Vulnerability	Exploitation statusNot known exploited	FixYes	Published05/13/2026	SeverityMedium
`CVE-2026-0262`PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing	Exploitation statusNot known exploited	FixYes	Published05/13/2026	SeverityMedium
`CVE-2026-0263`PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing	Exploitation statusNot known exploited	FixYes	Published05/13/2026	SeverityHigh
`CVE-2026-0264`PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution	Exploitation statusNot known exploited	FixYes	Published05/13/2026	SeverityHigh
`CVE-2026-0265`PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled	Exploitation statusNot known exploited	FixYes	Published05/13/2026	SeverityHigh
`CVE-2026-0300`PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal	Exploitation statusKEV	FixYes	Published05/06/2026	SeverityCritical
`CVE-2026-0229`PAN-OS: Denial of Service in Advanced DNS Security Feature	Exploitation statusPublic exploit	FixYes	Published02/11/2026	SeverityMedium
`CVE-2026-0228`PAN-OS: Improper Validation of Terminal Server Agent Certificate	Exploitation statusNot known exploited	FixYes	Published02/11/2026	SeverityLow
`CVE-2026-0227`PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal	Exploitation statusNot known exploited	FixYes	Published01/15/2026	SeverityMedium
`CVE-2025-4619`PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Packets	Exploitation statusNot known exploited	FixYes	Published11/13/2025	SeverityMedium
`CVE-2025-4615`PAN-OS: Improper Neutralization of Input in the Management Web Interface	Exploitation statusNot known exploited	FixYes	Published10/09/2025	SeverityMedium
`CVE-2025-4614`PAN-OS: Session Token Disclosure Vulnerability	Exploitation statusNot known exploited	FixYes	Published10/09/2025	SeverityMedium
`CVE-2025-2182`PAN-OS: Firewall Clusters using the MACsec Protocol Expose the Connectivity Association Key (CAK)	Exploitation statusNot known exploited	FixYes	Published08/13/2025	SeverityMedium
`CVE-2025-4229`PAN-OS: Traffic Information Disclosure Vulnerability	Exploitation statusNot known exploited	FixYes	Published06/13/2025	SeverityMedium
`CVE-2025-4230`PAN-OS: Authenticated Admin Command Injection Vulnerability Through CLI	Exploitation statusNot known exploited	FixYes	Published06/12/2025	SeverityHigh
`CVE-2025-4231`PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web Interface	Exploitation statusNot known exploited	FixYes	Published06/12/2025	SeverityHigh
`CVE-2025-0136`PAN-OS: Unencrypted Data Transfer when using AES-128-CCM on Intel-based hardware devices	Exploitation statusNot known exploited	FixYes	Published05/14/2025	SeverityMedium
`CVE-2025-0137`PAN-OS: Improper Neutralization of Input in the Management Web Interface	Exploitation statusNot known exploited	FixYes	Published05/14/2025	SeverityMedium
`CVE-2025-0133`PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal	Exploitation statusNot known exploited	FixYes	Published05/14/2025	SeverityLow
`CVE-2025-0130`PAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted Packets	Exploitation statusNot known exploited	FixYes	Published05/14/2025	SeverityHigh
`CVE-2025-0123`PAN-OS: Information Disclosure Vulnerability in HTTP/2 Packet Captures	Exploitation statusNot known exploited	FixYes	Published04/11/2025	SeverityMedium
`CVE-2025-0128`PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet	Exploitation statusNot known exploited	FixYes	Published04/11/2025	SeverityHigh
`CVE-2025-0127`PAN-OS: Authenticated Admin Command Injection Vulnerability in PAN-OS VM-Series	Exploitation statusNot known exploited	FixYes	Published04/11/2025	SeverityHigh
`CVE-2025-0126`PAN-OS: Session Fixation Vulnerability in GlobalProtect SAML Login	Exploitation statusNot known exploited	FixYes	Published04/11/2025	SeverityHigh
`CVE-2025-0125`PAN-OS: Improper Neutralization of Input in the Management Web Interface	Exploitation statusNot known exploited	FixYes	Published04/11/2025	SeverityMedium
`CVE-2025-0124`PAN-OS: Authenticated File Deletion Vulnerability on the Management Web Interface	Exploitation statusNot known exploited	FixYes	Published04/11/2025	SeverityMedium
`CVE-2025-0116`PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame	Exploitation statusNot known exploited	FixYes	Published03/12/2025	SeverityMedium
`CVE-2025-0115`PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLI	Exploitation statusNot known exploited	FixYes	Published03/12/2025	SeverityMedium
`CVE-2025-0114`PAN-OS: Denial of Service (DoS) in GlobalProtect	Exploitation statusNot known exploited	FixYes	Published03/12/2025	SeverityHigh
`CVE-2025-0111`PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface	Exploitation statusKEV	FixYes	Published02/12/2025	SeverityHigh
`CVE-2025-0109`PAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web Interface	Exploitation statusNot known exploited	FixYes	Published02/12/2025	SeverityMedium
`CVE-2025-0108`PAN-OS: Authentication Bypass in the Management Web Interface	Exploitation statusKEV	FixYes	Published02/12/2025	SeverityHigh
`CVE-2025-0107`Expedition: OS Command Injection Vulnerability	Exploitation statusPublic exploit	FixYes	Published01/11/2025	SeverityHigh
`CVE-2025-0106`Expedition: Wildcard Expansion Vulnerability	Exploitation statusNot known exploited	FixYes	Published01/11/2025	SeverityMedium
`CVE-2025-0105`Expedition: Arbitrary File Deletion Vulnerability	Exploitation statusNot known exploited	FixYes	Published01/11/2025	SeverityMedium
`CVE-2025-0104`Expedition: Cross-Site Scripting (XSS) Vulnerability	Exploitation statusNot known exploited	FixYes	Published01/11/2025	SeverityHigh
`CVE-2025-0103`Expedition: SQL Injection Vulnerability	Exploitation statusNot known exploited	FixYes	Published01/11/2025	SeverityCritical
`CVE-2024-3393`PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet	Exploitation statusKEV	FixYes	Published12/27/2024	SeverityHigh
`CVE-2024-9474`PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface	Exploitation statusKEV	FixYes	Published11/18/2024	SeverityMedium
`CVE-2024-0012`PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)	Exploitation statusKEV	FixYes	Published11/18/2024	SeverityCritical
`CVE-2024-2550`PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet	Exploitation statusNot known exploited	FixYes	Published11/14/2024	SeverityHigh
`CVE-2024-5920`PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate Administrator	Exploitation statusNot known exploited	FixYes	Published11/14/2024	SeverityMedium
`CVE-2024-5917`PAN-OS: Server-Side Request Forgery in WildFire	Exploitation statusNot known exploited	FixYes	Published11/14/2024	SeverityLow
`CVE-2024-2552`PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)	Exploitation statusNot known exploited	FixYes	Published11/14/2024	SeverityMedium
`CVE-2024-5918`PAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect User	Exploitation statusNot known exploited	FixYes	Published11/14/2024	SeverityMedium
`CVE-2024-5919`PAN-OS: Authenticated XML External Entities (XXE) Injection Vulnerability	Exploitation statusNot known exploited	FixYes	Published11/14/2024	SeverityMedium
`CVE-2024-2551`PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet	Exploitation statusNot known exploited	FixYes	Published11/14/2024	SeverityHigh
`CVE-2024-9472`PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Traffic	Exploitation statusNot known exploited	FixYes	Published11/14/2024	SeverityHigh
`CVE-2024-9471`PAN-OS: Privilege Escalation (PE) Vulnerability in XML API	Exploitation statusNot known exploited	FixYes	Published10/09/2024	SeverityMedium
`CVE-2024-9468`PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet	Exploitation statusNot known exploited	FixYes	Published10/09/2024	SeverityHigh
`CVE-2024-8691`PAN-OS: User Impersonation in GlobalProtect Portal	Exploitation statusNot known exploited	FixYes	Published09/11/2024	SeverityMedium
`CVE-2024-8688`PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)	Exploitation statusNot known exploited	FixYes	Published09/11/2024	SeverityMedium
`CVE-2024-8687`PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes	Exploitation statusNot known exploited	FixYes	Published09/11/2024	SeverityMedium
`CVE-2024-8686`PAN-OS: Command Injection Vulnerability	Exploitation statusNot known exploited	FixYes	Published09/11/2024	SeverityHigh
`CVE-2024-5916`PAN-OS: Cleartext Exposure of External System Secrets	Exploitation statusNot known exploited	FixYes	Published08/14/2024	SeverityMedium
`CVE-2024-5913`PAN-OS: Improper Input Validation Vulnerability in PAN-OS	Exploitation statusNot known exploited	FixYes	Published07/10/2024	SeverityMedium
`CVE-2024-5911`PAN-OS: File Upload Vulnerability in the Panorama Web Interface	Exploitation statusNot known exploited	FixYes	Published07/10/2024	SeverityHigh
`CVE-2024-3400`PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect	Exploitation statusKEV	FixYes	Published04/12/2024	SeverityCritical
`CVE-2024-3388`PAN-OS: User Impersonation in GlobalProtect SSL VPN	Exploitation statusNot known exploited	FixYes	Published04/10/2024	SeverityMedium
`CVE-2024-3387`PAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information Disclosure	Exploitation statusNot known exploited	FixYes	Published04/10/2024	SeverityMedium
`CVE-2024-3386`PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended	Exploitation statusNot known exploited	FixYes	Published04/10/2024	SeverityMedium
`CVE-2024-3385`PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled	Exploitation statusNot known exploited	FixYes	Published04/10/2024	SeverityHigh
`CVE-2024-3384`PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets	Exploitation statusNot known exploited	FixYes	Published04/10/2024	SeverityHigh
`CVE-2024-3383`PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)	Exploitation statusNot known exploited	FixYes	Published04/10/2024	SeverityHigh
`CVE-2024-3382`PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets	Exploitation statusNot known exploited	FixYes	Published04/10/2024	SeverityHigh
`CVE-2024-2433`PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability Loss	Exploitation statusNot known exploited	FixYes	Published03/13/2024	SeverityMedium
`CVE-2024-0011`PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication	Exploitation statusNot known exploited	FixYes	Published02/14/2024	SeverityMedium
`CVE-2024-0010`PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal	Exploitation statusNot known exploited	FixYes	Published02/14/2024	SeverityMedium
`CVE-2024-0009`PAN-OS: Improper IP Address Verification in GlobalProtect Gateway	Exploitation statusNot known exploited	FixYes	Published02/14/2024	SeverityMedium
`CVE-2024-0008`PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface	Exploitation statusNot known exploited	FixYes	Published02/14/2024	SeverityMedium
`CVE-2024-0007`PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface	Exploitation statusNot known exploited	FixYes	Published02/14/2024	SeverityMedium
`CVE-2023-6793`PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator	Exploitation statusNot known exploited	FixYes	Published12/13/2023	SeverityLow
`CVE-2023-6791`PAN-OS: Plaintext Disclosure of External System Integration Credentials	Exploitation statusNot known exploited	FixYes	Published12/13/2023	SeverityMedium
`CVE-2023-6789`PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface	Exploitation statusNot confirmed	FixYes	Published12/13/2023	SeverityMedium
`CVE-2023-6795`PAN-OS: OS Command Injection Vulnerability in the Web Interface	Exploitation statusNot confirmed	FixYes	Published12/13/2023	SeverityMedium
`CVE-2023-6794`PAN-OS: File Upload Vulnerability in the Web Interface	Exploitation statusNot confirmed	FixYes	Published12/13/2023	SeverityMedium
`CVE-2023-6792`PAN-OS: OS Command Injection Vulnerability in the XML API	Exploitation statusNot known exploited	FixYes	Published12/13/2023	SeverityMedium
`CVE-2023-6790`PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface	Exploitation statusNot confirmed	FixYes	Published12/13/2023	SeverityHigh
`CVE-2023-38046`PAN-OS: Read System Files and Resources During Configuration Commit	Exploitation statusNot known exploited	FixYes	Published07/12/2023	SeverityMedium

100 / 190 Results

Security vulnerabilities in PAN-OS

PAN-OS

Verify to analyze this security profile

How many security vulnerabilities does PAN-OS have?

Does the latest PAN-OS version have known vulnerabilities?

Run an in-depth assessment with complete web risk management