Skip to main content
EVULNABLE
Home

Palo Alto Networks

CVEs currently on EVULNABLE's Priority Feed for Palo Alto Networks, and this vendor's own CISA KEV history.

CISA KEV additions over time

Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.

20 Apr – 12 Oct; busiest week: 1 added.

Week of 2026-04-20: 0 added to KEV Week of 2026-04-27: 0 added to KEV Week of 2026-05-04: 1 added to KEV Week of 2026-05-11: 0 added to KEV Week of 2026-05-18: 0 added to KEV Week of 2026-05-25: 1 ransomware-linked of 1 added to KEV Week of 2026-06-01: 0 added to KEV Week of 2026-06-08: 0 added to KEV Week of 2026-06-15: 0 added to KEV Week of 2026-06-22: 0 added to KEV Week of 2026-06-29: 0 added to KEV Week of 2026-07-06: 0 added to KEV Week of 2026-07-13: 0 added to KEV Week of 2026-07-20: 0 added to KEV Week of 2026-07-27: 0 added to KEV Week of 2026-08-03: 0 added to KEV Week of 2026-08-10: 0 added to KEV Week of 2026-08-17: 0 added to KEV Week of 2026-08-24: 0 added to KEV Week of 2026-08-31: 0 added to KEV Week of 2026-09-07: 0 added to KEV Week of 2026-09-14: 0 added to KEV Week of 2026-09-21: 0 added to KEV Week of 2026-09-28: 0 added to KEV Week of 2026-10-05: 0 added to KEV Week of 2026-10-12 (so far): 1 added to KEV
1
1
May
Jun
Jul
Aug
Sep
Oct
  • Not ransomware-linked
  • Ransomware-linked
  • This week (so far)
CISA KEV additions per week, last 26 weeks
Week ofAdded to KEVRansomware-linked
2026-04-2000
2026-04-2700
2026-05-0410
2026-05-1100
2026-05-1800
2026-05-2511
2026-06-0100
2026-06-0800
2026-06-1500
2026-06-2200
2026-06-2900
2026-07-0600
2026-07-1300
2026-07-2000
2026-07-2700
2026-08-0300
2026-08-1000
2026-08-1700
2026-08-2400
2026-08-3100
2026-09-0700
2026-09-1400
2026-09-2100
2026-09-2800
2026-10-0500
2026-10-12 (so far)10

In EVULNABLE's ranked feed

Showing all 16 Palo Alto Networks CVEs in EVULNABLE's ranked feed.

#1 94 Immediate CVE-2024-3400 ExigentKEV since 2024 · listed over a yearRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Command Injection Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS99.9% · 99.99th pctlKEV since2024-04-12

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#2 94 Immediate CVE-2024-0012 ExigentKEV since 2024 · listed over a yearRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.3 (NVD)EPSS99.9% · 99.96th pctlKEV since2024-11-18

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#3 93 Immediate CVE-2026-0257 CISA federal deadline · Overdue by 5 monthsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability KEV + ransomware, EPSS 96.9%

EVRS 93/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS96.9% · 99.89th pctlKEV since2026-05-29

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#4 89 Immediate CVE-2024-9474 KEV since 2024 · listed over a yearRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability KEV + ransomware, EPSS 94.8%

EVRS 89/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.9 (NVD)EPSS94.8% · 99.86th pctlKEV since2024-11-18

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#5 88 Immediate CVE-2024-9463 ExigentKEV since 2024 · listed over a yearCISA KEV Palo Alto Networks — Palo Alto Networks Expedition OS Command Injection Vulnerability KEV, EPSS 98.5%

EVRS 88/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.9 (NVD)EPSS98.5% · 99.92nd pctlKEV since2024-11-14

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#6 87 Immediate CVE-2024-9465 ExigentKEV since 2024 · listed over a yearCISA KEV Palo Alto Networks — Palo Alto Networks Expedition SQL Injection Vulnerability KEV, EPSS 99.6%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.2 (NVD)EPSS99.6% · 99.95th pctlKEV since2024-11-14

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.996.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#7 87 Immediate CVE-2017-15944 ExigentKEV since 2022 · listed over a yearCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability KEV, EPSS 98.3%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS98.3% · 99.92nd pctlKEV since2022-08-18

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#8 86 Immediate CVE-2025-0108 KEV since 2025 · listed over a yearCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability KEV, EPSS 98.5%

EVRS 86/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS98.5% · 99.92nd pctlKEV since2025-02-18

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#9 85 Immediate CVE-2024-5910 ExigentKEV since 2024 · listed over a yearCISA KEV Palo Alto Networks — Palo Alto Networks Expedition Missing Authentication Vulnerability KEV, EPSS 91.7%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.3 (NVD)EPSS91.7% · 99.82nd pctlKEV since2024-11-07

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.917.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#10 85 Immediate CVE-2020-2021 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability KEV + ransomware, EPSS 4.4%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS4.4% · 91.1st pctlKEV since2022-03-25

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#11 77 Urgent CVE-2019-1579 KEV since 2022 · listed over a yearRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability KEV + ransomware, EPSS 46.2%

EVRS 77/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.1 (NVD)EPSS46.2% · 98.8th pctlKEV since2022-01-10

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#12 75 Urgent CVE-2026-0300 CISA federal deadline · Overdue by 5 monthsCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability KEV, EPSS 31.7%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.3 (NVD)EPSS31.7% · 98.3rd pctlKEV since2026-05-06

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.317.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#13 75 Urgent CVE-2024-3393 KEV since 2024 · listed over a yearCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability KEV, EPSS 29.1%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.7 (NVD)EPSS29.1% · 98.2nd pctlKEV since2024-12-30

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.291.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#14 75 Urgent CVE-2022-0028 KEV since 2022 · listed over a yearCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability KEV, EPSS 2.5%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.6 (NVD)EPSS2.5% · 84.7th pctlKEV since2022-08-22

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.025.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#15 75 Urgent CVE-2025-0111 KEV since 2025 · listed over a yearCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS File Read Vulnerability KEV, EPSS 2.0%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.1 (NVD)EPSS2.0% · 80.4th pctlKEV since2025-02-20

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.020.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#16 75 Urgent CVE-2026-0322 CISA federal deadline in 0 daysCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Code Injection Vulnerability KEV, EPSS 1.2%, added to KEV within the last 30 days

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.6 (NVD)EPSS1.2% · 68.1st pctlKEV since2026-10-14

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.012.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗