CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 05:50 UTC )
This week: 5,436 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,436 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product palo_alto_networks:pan-os . Show all products
33 CVEs, showing 1 to 33
CVE Severity Title Published CVE-2026-0300 Known exploited
Critical 9.3 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal Assigned by palo_alto
May 6, 2026 CVE-2026-0265 High 7.2 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled Assigned by palo_alto
May 13, 2026 CVE-2026-0264 High 7.2 PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution Assigned by palo_alto
May 13, 2026 CVE-2026-0262 Medium 6.6 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing Assigned by palo_alto
May 13, 2026 CVE-2026-0261 Medium 6.1 PAN-OS: Authenticated Admin Command Injection Vulnerability Assigned by palo_alto
May 13, 2026 CVE-2026-0258 Medium 4.8 PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching Assigned by palo_alto
May 13, 2026 CVE-2026-0257 Known exploited
High 7.8 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities Assigned by palo_alto
May 13, 2026 CVE-2026-0256 Medium 4.4 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface Assigned by palo_alto
May 13, 2026 CVE-2026-0266 Low 1.1 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface Assigned by palo_alto
Jun 10, 2026 CVE-2026-0269 Medium 4.6 PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing Assigned by palo_alto
Jun 10, 2026 CVE-2026-0272 Medium 6.0 PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI) Assigned by palo_alto
Jun 10, 2026 CVE-2026-0273 Medium 6.1 PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI Assigned by palo_alto
Jun 10, 2026 CVE-2026-0288 High 7.2 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent Assigned by palo_alto
Jul 8, 2026 CVE-2026-0287 Medium 6.6 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing Assigned by palo_alto
Jul 9, 2026 CVE-2026-0286 Medium 6.0 PAN-OS: Authenticated Command Injection in CLI Assigned by palo_alto
Jul 9, 2026 CVE-2026-0285 Medium 4.7 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface Assigned by palo_alto
Jul 9, 2026 CVE-2026-0284 Medium 4.7 PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN) Assigned by palo_alto
Jul 9, 2026 CVE-2026-0283 Medium 4.5 PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) Assigned by palo_alto
Jul 9, 2026 CVE-2026-0282 Low 2.7 PAN-OS: File Deletion Vulnerability in Management Web Interface Assigned by palo_alto
Jul 9, 2026 CVE-2026-0281 Low 2.1 PAN-OS: Information Disclosure Vulnerability in Management Web Interface Assigned by palo_alto
Jul 9, 2026 CVE-2026-0280 Low 1.7 PAN-OS: IPv6 Firewall Policy Bypass Assigned by palo_alto
Jul 9, 2026 CVE-2026-0279 Low 1.3 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities Assigned by palo_alto
Jul 9, 2026 CVE-2026-0301 Low 1.7 PAN-OS: Information Disclosure Vulnerability in URL Filtering Assigned by palo_alto
Aug 13, 2026 CVE-2026-0310 High 7.2 PAN-OS: Buffer Overflow Vulnerability via XML Processing Assigned by palo_alto
Sep 10, 2026 CVE-2026-0309 Medium 4.0 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration Assigned by palo_alto
Sep 10, 2026 CVE-2026-0308 Low 1.1 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface Assigned by palo_alto
Sep 10, 2026 CVE-2026-0322 Known exploited
High 8.6 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface Assigned by palo_alto
Oct 14, 2026 CVE-2026-0321 Medium 6.6 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services Assigned by palo_alto
Oct 14, 2026 CVE-2026-0320 Medium 6.1 PAN-OS: Authenticated Admin Command Injection Vulnerability Assigned by palo_alto
Oct 14, 2026 CVE-2026-0319 Medium 4.9 PAN-OS: Improper Input Handling Vulnerability Assigned by palo_alto
Oct 14, 2026 CVE-2026-0318 Medium 4.6 PAN-OS: Denial of Service (DoS) on Panorama Assigned by palo_alto
Oct 14, 2026 CVE-2026-0317 Low 1.2 PAN-OS: Denial of Service Vulnerability Assigned by palo_alto
Oct 14, 2026 CVE-2026-0316 Low 1.1 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability Assigned by palo_alto
Oct 14, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
