Paloaltonetworks Prisma Access — known CVE vulnerabilities

Every CVE whose affected-product data names Paloaltonetworks Prisma Access, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2026-0257 — CVSS 9.1 (critical) — actively exploited: Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker…
• CVE-2021-3060 — CVSS 8.1 (high): An OS command injection vulnerability in the Simple Certificate Enrollment Protocol (SCEP) feature of PAN-OS software allows an…
• CVE-2024-3393 — CVSS 7.5 (high) — actively exploited: A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to…
• CVE-2026-0227 — CVSS 7.5 (high): A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the…
• CVE-2024-8687 — CVSS 7.1 (high): An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the…
• CVE-2022-0011 — CVSS 6.5 (medium): PAN-OS software provides options to exclude specific websites from URL category enforcement and those websites are blocked or allowed…
• CVE-2021-3061 — CVSS 6.4 (medium): An OS command injection vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables an authenticated administrator…
• CVE-2024-3388 — CVSS 4.1 (medium): A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another…