# Palo Alto Networks security incidents · pwn.watch

> Security incidents tagged Palo Alto Networks (vendor, product, platform or attack type).

Page: https://pwn.watch/t/palo-alto · generated 2026-10-22T18:38:01.102Z

## Status (as of 2026-10-22)
- Incidents: 9 (1 live, 0 live and not fully patched, 9 patched)
- Days without a Palo Alto Networks security incident: 8
- Newest incident started: 2026-10-14

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/palo-alto.json
- RSS (one item per incident, bumped on each update): https://pwn.watch/t/palo-alto/feed.xml
- This file: https://pwn.watch/t/palo-alto/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Code Injection Vulnerability](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0322) ([json](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0322.json)): high, live, patched, started 2026-10-14, CVE-2026-0322
- [Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0257) ([json](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0257.json)): high, closed, patched, started 2026-05-29, CVE-2026-0257
- [Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0300) ([json](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2026-0300.json)): high, closed, patched, started 2026-05-06, CVE-2026-0300
- [Palo Alto Networks PAN-OS: PAN-OS File Read Vulnerability](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2025-0111) ([json](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2025-0111.json)): high, closed, patched, started 2025-02-20, CVE-2025-0111
- [Palo Alto Networks PAN-OS: PAN-OS Authentication Bypass Vulnerability](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2025-0108) ([json](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2025-0108.json)): high, closed, patched, started 2025-02-18, CVE-2025-0108
- [Palo Alto Networks PAN-OS Malicious DNS Packet](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2024-3393) ([json](https://pwn.watch/i/palo-alto-networks-pan-os-cve-2024-3393.json)): high, closed, patched, started 2024-12-27, CVE-2024-3393
- [Palo Alto PAN-OS management interface auth bypass + privilege escalation](https://pwn.watch/i/palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474) ([json](https://pwn.watch/i/palo-alto-pan-os-management-auth-bypass-cve-2024-0012-9474.json)): critical, closed, patched, started 2024-11-18, CVE-2024-0012, CVE-2024-9474
- [Palo Alto Networks Expedition: 3 actively exploited vulnerabilities](https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465) ([json](https://pwn.watch/i/palo-alto-networks-expedition-cve-2024-5910-9463-9465.json)): critical, closed, patched, started 2024-07-10, CVE-2024-5910, CVE-2024-9463, CVE-2024-9465
- [Palo Alto PAN-OS GlobalProtect zero-day (CVE-2024-3400)](https://pwn.watch/i/palo-alto-pan-os-globalprotect-zero-day-cve-2024-3400) ([json](https://pwn.watch/i/palo-alto-pan-os-globalprotect-zero-day-cve-2024-3400.json)): critical, closed, patched, started 2024-04-12, CVE-2024-3400