Palo Alto Networks: CISA KEV History
Every Palo Alto Networks vulnerability in the CISA Known Exploited Vulnerabilities catalog: confirmed in-the-wild exploitation, addition timeline, and ransomware linkage. Rebuilt automatically on every site deploy.
Snapshot: 2026-09-08 · Source: CISA KEV Catalog · Full KEV dashboard
KEV entries
15
Added, last 12 months
2
Ransomware-linked
6
Latest addition
2026-05-29
Palo Alto Networks KEV additions per month, last 24 months
Most-listed products: PAN-OS, Expedition.
Latest 15 of 15 Palo Alto Networks KEV entries
| CVE | Vulnerability | Added | Ransomware |
|---|---|---|---|
| CVE-2026-0257 | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 2026-05-29 | Yes |
| CVE-2026-0300 | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | 2026-05-06 | No |
| CVE-2025-0111 | Palo Alto Networks PAN-OS File Read Vulnerability | 2025-02-20 | No |
| CVE-2025-0108 | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 2025-02-18 | No |
| CVE-2024-3393 | Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability | 2024-12-30 | No |
| CVE-2024-9474 | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | 2024-11-18 | Yes |
| CVE-2024-0012 | Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability | 2024-11-18 | Yes |
| CVE-2024-9465 | Palo Alto Networks Expedition SQL Injection Vulnerability | 2024-11-14 | No |
| CVE-2024-9463 | Palo Alto Networks Expedition OS Command Injection Vulnerability | 2024-11-14 | No |
| CVE-2024-5910 | Palo Alto Networks Expedition Missing Authentication Vulnerability | 2024-11-07 | No |
| CVE-2024-3400 | Palo Alto Networks PAN-OS Command Injection Vulnerability | 2024-04-12 | Yes |
| CVE-2022-0028 | Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability | 2022-08-22 | No |
| CVE-2017-15944 | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | 2022-08-18 | No |
| CVE-2020-2021 | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 2022-03-25 | Yes |
| CVE-2019-1579 | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | 2022-01-10 | Yes |
CVE links go to our explainer when one exists, otherwise to the NVD record.
Data: official CISA KEV catalog, fetched at build time. Figures may be reused with attribution to East Bay Cyber and CISA. See also the KEV Velocity Dashboard and all tracked vendors.