MSRXPalo Alto Networks vulnerabilities being exploited
3 Palo Alto Networks flaws were confirmed exploited in the wild in the past 365 days, 1 used in ransomware, across 1 product: PAN-OS. If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2026-10-14 | CVE-2026-0322 PAN-OS Palo Alto Networks PAN-OS Code Injection Vulnerability Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. | 2026-10-17 |
| 2026-05-29 | CVE-2026-0257 PAN-OS ransomwarePalo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection. | 2026-06-01 |
| 2026-05-06 | CVE-2026-0300 PAN-OS Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. | 2026-05-09 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.