Vulnerabilidades em Palo Alto Networks

364 resultados
Análise Vexday

Das 316 CVEs catalogadas para Palo Alto Networks, 13 estão confirmadas em exploração ativa no catálogo KEV da CISA, representando uma taxa 9,1 vezes acima da média geral do catálogo — sinal de que vulnerabilidades nesse vendor atraem exploração real com frequência desproporcional. A CVE mais crítica em atividade é a CVE-2024-3400, que atingiu EPSS máximo de 1,0, indicando probabilidade extremamente elevada de exploração observada ou iminente. O tipo de falha mais recorrente é CWE-78 (injeção de comandos no sistema operacional), uma classe de vulnerabilidade com alto potencial de impacto em appliances de segurança de perímetro. Com 17 CVEs críticas, 15 com PoC pública e 39 surgidas nos últimos 90 dias, equipes responsáveis por ambientes que utilizam produtos Palo Alto Networks devem priorizar ciclos curtos de patching e monitorar ativamente os indicadores de exploração.

CVE-2020-1994MEDIUMPAN-OS: Predictable temporary file vulnerabilityEPSS 0.2%CVE-2024-8688MEDIUMPAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)EPSS 0.2%CVE-2025-0116MEDIUMPAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP FrameEPSS 0.2%CVE-2026-0234HIGHCortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integrationEPSS 0.2%CVE-2024-5913MEDIUMPAN-OS: Improper Input Validation Vulnerability in PAN-OSEPSS 0.2%CVE-2022-0015HIGHCortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) VulnerabilityEPSS 0.2%CVE-2022-0026MEDIUMCortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) VulnerabilityEPSS 0.2%CVE-2026-0269MEDIUMPAN-OS: Denial of Service (DoS) in Tunnel Traffic ProcessingEPSS 0.2%CVE-2022-0021LOWGlobalProtect App: Information Exposure Vulnerability When Using Connect Before LogonEPSS 0.2%CVE-2024-8689MEDIUMActiveMQ Content Pack: Cleartext Exposure of CredentialsEPSS 0.2%CVE-2020-2032HIGHGlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgradeEPSS 0.2%CVE-2022-0013MEDIUMCortex XDR Agent: File Information Exposure Vulnerability When Generating Support FileEPSS 0.2%CVE-2021-3038MEDIUMGlobalProtect App: Windows VPN kernel driver denial of service (DoS)EPSS 0.2%CVE-2022-0029MEDIUMCortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support FileEPSS 0.2%CVE-2026-0244MEDIUMPrisma SD-WAN: Improper Certificate Validation VulnerabilityEPSS 0.2%CVE-2023-0001MEDIUMCortex XDR Agent: Cleartext Exposure of Agent Admin PasswordEPSS 0.2%CVE-2024-5915MEDIUMGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityEPSS 0.2%CVE-2024-9469MEDIUMCortex XDR Agent: Local Windows User Can Disable the AgentEPSS 0.2%CVE-2021-3032MEDIUMPAN-OS: Configuration secrets for log forwarding may be logged in system logsEPSS 0.2%CVE-2026-45165HIGHIdira Secrets Manager (Self-Hosted): Improper Authorization in REST APIEPSS 0.2%