Panorama vulnerabilities

4 known vulnerabilities in Panorama from Palo Alto Networks. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Cloud NGFW: Incorrect Calculation of Buffer Size

  CVE-2026-0280Jul 9, 2026Palo Alto Networks

  An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network traffic that should be blocked to reach protected services. Clo

• 9.8 Critical severity

  Cloud NGFW: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-0107Jan 11, 2025Palo Alto NetworksEPSS 78.4%

  An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations

• 9.1 Critical severity

  Cloud NGFW: External Control of File Name or Path

  CVE-2025-0105Jan 11, 2025Palo Alto NetworksEPSS 13.2%

  An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to delete arbitrary files accessible to the www-data user on the host filesystem.

• 8.8 High severity

  Cloud NGFW: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-0103Jan 11, 2025Palo Alto Networks

  An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. This vulnerability also enables attackers