26 exploited vulnerabilities in Pan-Os

Vulnerabilities with publicly known exploits

Vendors: Palo Alto Networks, Palo Alto, Almalinux, Astra Linux, Centos, Check Point
With known exploits: 26
Affected Paloaltonetworks Pan-os versions: < 10.2.7, 10.2.10, 10.2.13, 10.2.16, 10.2.17, 10.2.18, 10.2.0, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5, 10.2.6, 10.2.8, 10.2.9, 11.0.0, 11.0.1, 11.0.2, 11.0.3, 11.0.4, 11.1.0, 11.1.1, 11.1.2, 8.0.20, 8.1.15, 9.0.9, 9.1.3, 5.0.20, 5.1.13, 6.0.15, 6.1.15, 7.0.11, 7.1.6, 10.2.11, 10.2.12, 10.2.14, 10.2.15, 11.1.3, 11.1.4, 11.1.5, 11.1.6, 11.1.7, 11.1.8, 11.1.9, 11.1.10, 11.1.11, 11.1.12, 11.1.13, 11.1.14, 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 11.2.5, 11.0.5, 11.0.6, 6.1.19, 7.0.19, 7.1.14, 8.0.6, 7.1.26, 7.1.19, 8.0.12, 8.1.3, 10.1.14, 11.2.8, 9.0.10, 9.1.4, 10.0.1, 8.1.19, 9.0.14, 9.1.10, 4.0.8, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.1.0, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5, 4.1.6, 4.1.7, 4.1.8, 4.1.8-h3, 4.1.9, 4.1.10, 5.0.0, 5.0.0-h1
Affected Freeradius versions: < 3.0.27
Affected Gnu Wget versions: < 1.18
Affected Frrouting versions: ≤ 9.0
Affected pica8 Picos versions: = 4.3.3.2
Affected f5 Nginx versions: ≤ 1.12.1, 1.13.2
Affected Net-snmp versions: < 5.8
Affected Google Android versions: ≤ 7.0

CVE-2026-0265 3 exploits

CVSS 10.0 HIGH 2026-05-13

Exploit for CVE-2026-0265 Exploit for CVE-2026-0265

CVE-2024-3400 44 exploits

CVSS 10.0 CRITICAL 2024-04-12FIX AVAILABLE

Exploit for Command Injection in Paloaltonetworks Pan-Os Exploit for Improper Input Validation in Paloaltonetworks Pan-Os

CVE-2020-2021 1 exploit

CVSS 10.0 CRITICAL 2020-06-29FIX AVAILABLE

Exploit for Improper Verification of Cryptographic Signature in Paloaltonetworks Pan-Os

CVE-2016-9150 2 exploits

CVSS 10.0 CRITICAL 2016-11-17FIX AVAILABLE

Palo Alto Networks PanOS appweb3 - Stack Buffer Overflow Vulnerability Palo Alto Networks PanOS - appweb3 Stack Buffer Overflow

CVE-2026-0300 6 exploits

CVSS 9.8 CRITICAL 2026-05-06FIX AVAILABLE

Exploit for Out-of-bounds Write in Paloaltonetworks Pan-Os Exploit for Out-of-bounds Write in Paloaltonetworks Pan-Os

CVE-2024-0012 14 exploits

CVSS 9.8 CRITICAL 2024-10-03FIX AVAILABLE

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os 📄 Palo Alto Networks PAN-OS 11.2 PHP Code Injection

CVE-2017-15944 12 exploits

CVSS 9.8 CRITICAL 2017-12-06FIX AVAILABLE

Exploit for Improper Input Validation in Paloaltonetworks Pan-Os Palo Alto Networks - readSessionVarsFromFile() Session Corruption Exploit

CVE-2020-2034 1 exploit

CVSS 9.3 HIGH 2020-07-08FIX AVAILABLE

Exploit for OS Command Injection in Paloaltonetworks Pan-Os

CVSS 9.3 HIGH 2019-07-18FIX AVAILABLE

CVE-2025-0108 7 exploits

CVSS 9.1 CRITICAL 2025-02-12

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

CVE-2025-4615 2 exploits

CVSS 9.0 HIGH 2025-08-10

Exploit for Improper Neutralization of Script in Attributes in a Web Page in Paloaltonetworks Pan-Os Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

CVE-2024-3596 2 exploits

CVSS 9.0 CRITICAL 2024-07-09FIX AVAILABLE

Exploit for Improper Enforcement of Message Integrity During Transmission in a Communication Channel in Freeradius Exploit for Improper Enforcement of Message Integrity During Transmission in a Communication Channel in Freeradius

CVE-2020-2038 6 exploits

CVSS 9.0 HIGH 2020-09-09FIX AVAILABLE

Palo Alto Networks Authenticated Remote Code Execution Palo Alto Networks Authenticated Remote Code Execution

CVE-2016-4971 7 exploits

CVSS 8.8 HIGH 2016-06-10FIX AVAILABLE

GNU Wget < 1.18 - Arbitrary File Upload / Remote Code Execution Exploit (2)GNU Wget < 1.18 - Arbitrary File Upload (2)

CVSS 8.7 HIGH 2024-12-27FIX AVAILABLE

CVSS 7.8 HIGH 2023-08-28

CVE-2017-7529 7 exploits

CVSS 7.8 HIGH 2017-07-11FIX AVAILABLE

Exploit for Integer Overflow or Wraparound in F5 Nginx Nginxpwner - Tool to look for common Nginx misconfigurations and vulnerabilities

CVE-2016-9151 4 exploits

CVSS 7.8 HIGH 2016-11-17FIX AVAILABLE

Palo Alto Networks PanOS root_reboot - Privilege Escalation Vulnerability Palo Alto Networks PanOS root_trace - Privilege Escalation Vulnerability

CVE-2024-9474 13 exploits

CVSS 7.2 HIGH 2024-10-03FIX AVAILABLE

📄 Palo Alto Networks PAN-OS 11.2 PHP Code Injection Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

CVE-2018-18065 1 exploit

CVSS 6.5 MEDIUM 2016-10-06

net-snmp 5.7.3 - (Authenticated) Denial of Service (PoC)

CVE-2016-5696 2 exploits

CVSS 5.8 MEDIUM 2016-07-31FIX AVAILABLE

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Google Android Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Google Android

CVE-2014-9708 1 exploit

CVSS 5.0 MEDIUM 2015-03-31FIX AVAILABLE

Appweb Web Server Denial Of Service

CVSS 4.9 MEDIUM 2021-08-11FIX AVAILABLE

CVSS 4.3 MEDIUM 2020-09-09FIX AVAILABLE

CVE-2014-3566 9 exploits

CVSS 4.3 MEDIUM 1999-01-01FIX AVAILABLE

Exploit for Generation of Predictable IV with CBC Mode in Redhat Enterprise_Linux sslpwn

CVSS 4.3 MEDIUM 2013-01-07FIX AVAILABLE