Is Palo Alto Networks safe right now?
1 flaw was added to CISA's list of actively exploited vulnerabilities in the last 30 days, including zero-days. If you run Palo Alto Networks, update now.
Exploited in the last 90 days
- PAN-OSZero-dayPalo Alto Networks PAN-OS Code Injection Vulnerability
What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.
Earlier exploited flaws
- Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
- Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability Zero-day
- Palo Alto Networks PAN-OS File Read Vulnerability
- Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Zero-day
- Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability Zero-day
- Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability Zero-day
- Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability Zero-day
- Palo Alto Networks Expedition SQL Injection Vulnerability
- Palo Alto Networks Expedition OS Command Injection Vulnerability
- Palo Alto Networks Expedition Missing Authentication Vulnerability
- Palo Alto Networks PAN-OS Command Injection Vulnerability Zero-day
- Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
- Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
- Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
- Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 3 | 2 |
| 2025 | 2 | 1 |
| 2024 | 7 | 4 |
| 2023 | 0 | 0 |
| 2022 | 4 | 0 |
Questions
Is Palo Alto Networks safe right now?
1 flaw was added to CISA's list of actively exploited vulnerabilities in the last 30 days, including zero-days. If you run Palo Alto Networks, update now. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many Palo Alto Networks vulnerabilities have been exploited?
16 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks, 6 of them used by ransomware.
Covers products matching palo alto, pan-os, globalprotect. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.