Palo Alto Networks: every exploited CVE on CISA KEV
All 16 Palo Alto Networks bugs attackers are confirmed to be using, with attack scores and free detection rules.
Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.
16
Palo Alto Networks bugs on CISA’s exploited list
3 added in 2026.
6
are linked to ransomware
Every Palo Alto Networks vulnerability the US government has confirmed attackers are using, newest first, with each bug’s EPSS (predicted attack chance) and VEDAS (exploit evidence) scores and any free Nuclei or Suricata detection rule. US federal agencies must fix KEV-listed bugs by a deadline; everyone else should treat the list as “patch first”.
| Added | CVE | Product | Bug | EPSS | VEDAS | Detection rule | Ransomware |
|---|---|---|---|---|---|---|---|
| 2026-10-14 | CVE-2026-0322 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Code Injection Vulnerability | 0.02 | 0.51 | None yet | No |
| 2026-05-29 | CVE-2026-0257 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 0.95 | 0.98 | None yet | Yes |
| 2026-05-06 | CVE-2026-0300 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | 0.42 | 0.98 | None yet | No |
| 2025-02-20 | CVE-2025-0111 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS File Read Vulnerability | 0.02 | 0.70 | None yet | No |
| 2025-02-18 | CVE-2025-0108 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 0.98 | 0.99 | Nuclei · Suricata | No |
| 2024-12-30 | CVE-2024-3393 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability | 0.29 | 0.90 | None yet | No |
| 2024-11-18 | CVE-2024-9474 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | 0.94 | 0.99 | Nuclei · Suricata | Yes |
| 2024-11-18 | CVE-2024-0012 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | Yes |
| 2024-11-14 | CVE-2024-9465 | Palo Alto Networks Expedition | Palo Alto Networks Expedition SQL Injection Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | No |
| 2024-11-14 | CVE-2024-9463 | Palo Alto Networks Expedition | Palo Alto Networks Expedition OS Command Injection Vulnerability | 0.99 | 0.98 | Nuclei · Suricata | No |
| 2024-11-07 | CVE-2024-5910 | Palo Alto Networks Expedition | Palo Alto Networks Expedition Missing Authentication Vulnerability | 0.92 | 0.99 | Nuclei · Suricata | No |
| 2024-04-12 | CVE-2024-3400 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Command Injection Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | Yes |
| 2022-08-22 | CVE-2022-0028 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability | 0.03 | 0.74 | None yet | No |
| 2022-08-18 | CVE-2017-15944 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | 0.98 | 0.98 | Nuclei · Suricata | No |
| 2022-03-25 | CVE-2020-2021 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 0.04 | 0.98 | None yet | Yes |
| 2022-01-10 | CVE-2019-1579 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | 0.44 | 0.98 | None yet | Yes |
Industry partners
