Sysprobs Sysprobs

CISA KEV by vendor

Palo Alto Networks vulnerabilities in the CISA KEV catalogue

16 Palo Alto Networks entries in CISA's Known Exploited Vulnerabilities catalogue, 6 of them (38 percent) known to have been used in ransomware campaigns. First added 10 January 2022, latest 14 October 2026.

Last updated MethodologyDownload all entries (CSV)

By . Published by Sysprobs.

Dinesh has worked in IT for about 20 years across virtualisation, networking and Microsoft platforms. He runs Sysprobs.

Data status: a source is stale

Last synced CISA catalogue version 2026.11.04 (released 4 November 2026) 1,768 entries Updated manually

16entries, 0.9% of the catalogue
6known ransomware use
0added in the last 7 days
0federal due dates in the next 14 days

Products

Palo Alto Networks products in the catalogue, by number of entries
Product, as CISA names itEntries
PAN-OS13
Expedition3

Latest additions

The 10 most recent Palo Alto Networks entries
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2026-0322PAN-OS2026-10-142026-10-17 passedUnknown8.6 High1.7%Not auto, total3 days + triage
CVE-2026-0257PAN-OS2026-05-292026-06-01Known7.8 High95.6%Not auto, total3 days + triage
CVE-2026-0300PAN-OS2026-05-062026-05-09Unknown9.3 Critical41.7%Auto, total3 days + triage
CVE-2025-0111PAN-OS2025-02-202025-03-13Unknown7.1 High1.9%Not auto, partial14 days
CVE-2025-0108PAN-OS2025-02-182025-03-11Unknown8.8 High98.4%Auto, partial3 days
CVE-2024-3393PAN-OS2024-12-302025-01-20Unknown8.7 High29.1%Auto, partial3 days
CVE-2024-9474PAN-OS2024-11-182024-12-09Known6.9 Medium93.7%Not auto, total3 days + triage
CVE-2024-0012PAN-OS2024-11-182024-12-09Known9.3 Critical99.7%Auto, total3 days + triage
CVE-2024-9465Expedition2024-11-142024-12-05Unknown9.2 Critical99.6%Auto, total3 days + triage
CVE-2024-9463Expedition2024-11-142024-12-05Unknown9.9 Critical98.5%Auto, total3 days + triage

All 16 entries

Every Palo Alto Networks entry, newest first
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2026-0322PAN-OS2026-10-142026-10-17 passedUnknown8.6 High1.7%Not auto, total3 days + triage
CVE-2026-0257PAN-OS2026-05-292026-06-01Known7.8 High95.6%Not auto, total3 days + triage
CVE-2026-0300PAN-OS2026-05-062026-05-09Unknown9.3 Critical41.7%Auto, total3 days + triage
CVE-2025-0111PAN-OS2025-02-202025-03-13Unknown7.1 High1.9%Not auto, partial14 days
CVE-2025-0108PAN-OS2025-02-182025-03-11Unknown8.8 High98.4%Auto, partial3 days
CVE-2024-3393PAN-OS2024-12-302025-01-20Unknown8.7 High29.1%Auto, partial3 days
CVE-2024-9474PAN-OS2024-11-182024-12-09Known6.9 Medium93.7%Not auto, total3 days + triage
CVE-2024-0012PAN-OS2024-11-182024-12-09Known9.3 Critical99.7%Auto, total3 days + triage
CVE-2024-9465Expedition2024-11-142024-12-05Unknown9.2 Critical99.6%Auto, total3 days + triage
CVE-2024-9463Expedition2024-11-142024-12-05Unknown9.9 Critical98.5%Auto, total3 days + triage
CVE-2024-5910Expedition2024-11-072024-11-28Unknown9.3 Critical91.6%Auto, total3 days + triage
CVE-2024-3400PAN-OS2024-04-122024-04-19Known10.0 Critical99.9%Auto, total3 days + triage
CVE-2022-0028PAN-OS2022-08-222022-09-12Unknown8.6 High2.6%Auto, partial3 days
CVE-2017-15944PAN-OS2022-08-182022-09-08Unknown9.8 Critical98.3%Auto, total3 days + triage
CVE-2020-2021PAN-OS2022-03-252022-04-15Known10.0 Critical4.3%Auto, total3 days + triage
CVE-2019-1579PAN-OS2022-01-102022-07-10Known8.1 High44.1%Not auto, total3 days + triage

Due dates bind US federal civilian executive branch agencies only (BOD 26-04). Filter Palo Alto Networks in the tracker by date, score or status.

Source: CISA Known Exploited Vulnerabilities Catalog; NVD, FIRST EPSS and CISA SSVC for the scores. This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA does not endorse Sysprobs.