- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, Prisma Access recorded 5 security vulnerabilities in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Prisma Access and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-0321PAN-OS: Denial of Service (DoS) Vulnerabilities in Network ServicesCVE-2026-0319PAN-OS: Improper Input Handling VulnerabilityCVE-2026-0310Palo Alto Networks PAN-OS XML buffer overflow enables denial of service or root code executionCVE-2026-0308PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceCVE-2026-0301PAN-OS: Information Disclosure Vulnerability in URL Filtering| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-0321PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2026-0319PAN-OS: Improper Input Handling Vulnerability | Exploitation statusNot exploited | FixYes | Published10/14/2026 | SeverityMedium |
|---|
CVE-2026-0310Palo Alto Networks PAN-OS XML buffer overflow enables denial of service or root code execution | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityHigh |
|---|
CVE-2026-0308PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityLow |
|---|
CVE-2026-0301PAN-OS: Information Disclosure Vulnerability in URL Filtering | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityLow |
|---|
CVE-2026-0287PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing | Exploitation statusNot exploited | FixYes | Published07/09/2026 | SeverityMedium |
|---|
CVE-2026-0280PAN-OS: IPv6 Firewall Policy Bypass | Exploitation statusNot exploited | FixYes | Published07/09/2026 | SeverityLow |
|---|
CVE-2026-0279PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities | Exploitation statusNot exploited | FixYes | Published07/09/2026 | SeverityLow |
|---|
CVE-2026-0288PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent | Exploitation statusNot exploited | FixYes | Published07/08/2026 | SeverityHigh |
|---|
CVE-2026-0262PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing | Exploitation statusNot exploited | FixYes | Published05/13/2026 | SeverityMedium |
|---|
CVE-2026-0257PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities | Exploitation statusKEV | FixYes | Published05/13/2026 | SeverityHigh |
|---|
CVE-2026-0228PAN-OS: Improper Validation of Terminal Server Agent Certificate | Exploitation statusNot exploited | FixYes | Published02/11/2026 | SeverityLow |
|---|
CVE-2026-0227PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal | Exploitation statusNot exploited | FixYes | Published01/15/2026 | SeverityMedium |
|---|
CVE-2025-4619PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Packets | Exploitation statusNot exploited | FixYes | Published11/13/2025 | SeverityMedium |
|---|
CVE-2025-0133PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal | Exploitation statusNot exploited | FixYes | Published05/14/2025 | SeverityLow |
|---|
CVE-2025-0128PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet | Exploitation statusNot exploited | FixYes | Published04/11/2025 | SeverityHigh |
|---|
CVE-2025-0126PAN-OS: Session Fixation Vulnerability in GlobalProtect SAML Login | Exploitation statusNot exploited | FixYes | Published04/11/2025 | SeverityHigh |
|---|
CVE-2024-8687PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes | Exploitation statusNot exploited | FixYes | Published09/11/2024 | SeverityMedium |
|---|
CVE-2024-5913PAN-OS: Improper Input Validation Vulnerability in PAN-OS | Exploitation statusNot exploited | FixYes | Published07/10/2024 | SeverityMedium |
|---|
CVE-2024-3388PAN-OS: User Impersonation in GlobalProtect SSL VPN | Exploitation statusNot exploited | FixYes | Published04/10/2024 | SeverityMedium |
|---|
20 Results | Page 1 of 1