Vulnerabilities
Summary — last 7 days
New vulnerabilities4,982▲ 170 vs. last week
Critical / high1,824▼ 937 vs. last week
New active exploitation (KEV)13▲ 6 vs. last week
Unscored (no CVSS)1,070▲ 1,007 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Medium (6.6) | 0.33% | — | Palo Alto Networks Pan-osAIPalo Alto Networks Prisma AccessAIPalo Alto Networks Cloud NgfwAI | 10/14/2026 | 10/15/2026 | Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the… | |
| Modified | Low (1.7) | 0.33% | — | Paloaltonetworks Cloud NgfwPaloaltonetworks Prisma AccessPaloaltonetworks Pan-os | 8/13/2026 | 10/15/2026 | An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability. | |
| Modified | Medium (6.6) | 0.62% | — | Paloaltonetworks Cloud NgfwPaloaltonetworks Pan-os | 7/9/2026 | 8/11/2026 | Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in… | |
| Deferred | High (8.3) | 0.40% | — | Paloaltonetworks GlobalprotectAIPaloaltonetworks Pan-osAIPaloaltonetworks Prisma AccessAIPaloaltonetworks Cloud NgfwAI | 4/11/2025 | 6/17/2026 | When configured using SAML, a session fixation vulnerability in the GlobalProtect™ login enables an attacker to impersonate a legitimate authorized user and perform actions as that GlobalProtect user. This requires the legitimate user to first click on a malicious link provided by the attacker. The SAML login for the… |