Vulnerabilidades em Palo Alto Networks

364 resultados
Análise Vexday

Das 316 CVEs catalogadas para Palo Alto Networks, 13 estão confirmadas em exploração ativa no catálogo KEV da CISA, representando uma taxa 9,1 vezes acima da média geral do catálogo — sinal de que vulnerabilidades nesse vendor atraem exploração real com frequência desproporcional. A CVE mais crítica em atividade é a CVE-2024-3400, que atingiu EPSS máximo de 1,0, indicando probabilidade extremamente elevada de exploração observada ou iminente. O tipo de falha mais recorrente é CWE-78 (injeção de comandos no sistema operacional), uma classe de vulnerabilidade com alto potencial de impacto em appliances de segurança de perímetro. Com 17 CVEs críticas, 15 com PoC pública e 39 surgidas nos últimos 90 dias, equipes responsáveis por ambientes que utilizam produtos Palo Alto Networks devem priorizar ciclos curtos de patching e monitorar ativamente os indicadores de exploração.

CVE-2025-0128HIGHPAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted PacketEPSS 0.3%CVE-2026-0318MEDIUMPAN-OS: Denial of Service (DoS) on PanoramaEPSS 0.3%CVE-2020-2004MEDIUMGlobalProtect App: Passwords may be logged in clear text while collecting troubleshooting logsEPSS 0.3%CVE-2019-17436—A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlier and version 4.1.12EPSS 0.3%CVE-2026-0289LOWPrisma Browser: Inappropriate Implementation in Account ProtectionEPSS 0.3%CVE-2020-1978MEDIUMVM-Series on Microsoft Azure: Inadvertent collection of credentials in Tech support files on HA configured VMsEPSS 0.3%CVE-2020-2020MEDIUMCortex XDR Agent: Exceptional condition denial-of-service (DoS)EPSS 0.3%CVE-2020-1987LOWGlobal Protect Agent: VPN cookie local information disclosureEPSS 0.3%CVE-2026-0317LOWPAN-OS: Denial of Service VulnerabilityEPSS 0.3%CVE-2023-0002MEDIUMCortex XDR Agent: Product Disruption by Local Windows UserEPSS 0.3%CVE-2024-9471MEDIUMPAN-OS: Privilege Escalation (PE) Vulnerability in XML APIEPSS 0.3%CVE-2019-17435—A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for WindEPSS 0.3%CVE-2026-0282LOWPAN-OS: File Deletion Vulnerability in Management Web InterfaceEPSS 0.3%CVE-2024-9473MEDIUMGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityEPSS 0.3%CVE-2026-0274HIGHCortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integrationEPSS 0.3%CVE-2026-0281LOWPAN-OS: Information Disclosure Vulnerability in Management Web InterfaceEPSS 0.3%CVE-2020-1976MEDIUMGlobalProtect on MacOS: Local denial-of-service (DoS) vulnerability.EPSS 0.3%CVE-2026-0319MEDIUMPAN-OS: Improper Input Handling VulnerabilityEPSS 0.3%CVE-2020-1991HIGHTraps: Insecure temporary file vulnerability may allow privilege escalation on WindowsEPSS 0.3%CVE-2022-0017HIGHGlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege EscalationEPSS 0.3%