Palo Alto Networks vulnerabilities under active exploitation

11 CVEs on this page carry evidence of exploitation.

Which Palo Alto Networks vulnerabilities are being exploited?

8 of them are in the CISA KEV catalog.

3 were added to KEV in the last 90 days.

• CVE-2026-34486 In KEV since 2026-08-04 · EPSS 83% · No fix identified here
• CVE-2026-20253 In KEV since 2026-06-18 · EPSS 97% · No fix identified here
• CVE-2026-0257 In KEV since 2026-05-29 · EPSS 94% · No fix identified here
• CVE-2026-0300 In KEV since 2026-05-06 · EPSS 32% · No fix identified here
• CVE-2026-39987 In KEV since 2026-04-23 · EPSS 97% · No fix identified here
• CVE-2026-3055 In KEV since 2026-03-30 · No fix identified here
• CVE-2026-33017 In KEV since 2026-03-25 · No fix identified here
• CVE-2025-68613 In KEV since 2026-03-11 · EPSS 98% · No fix identified here
• CVE-2023-48795 EPSS 93% · No fix identified here
• CVE-2026-21858 EPSS 73% · No fix identified here
• CVE-2026-33824 EPSS 56% · No fix identified here

Which of them have a fix?

We cannot name a fix for any of them.

For the rest we hold no patch identifier, which is not the same as no patch existing.

What PlainSec published about Palo Alto Networks

• Patches Leave Dependency Risk Behind (2026-06-12)
• SSH MitM Downgrade Impacts Palo Alto PAN‑OS and Prisma ION (2026-03-10)

Which Palo Alto Networks products this page tracks

• Cortex XDR
• Cortex XSIAM
• PAN-OS
• Palo Alto
• Palo Alto Cortex
• Palo Alto Firewall
• Palo Alto Networks
• Palo Alto Networks PAN-OS
• Palo Alto PAN-OS
• Palo Alto Prisma Cloud
• Palo Alto XSIAM
• Prisma Cloud

KEV and EPSS are re-checked daily. Page last updated 2026-08-16.