Palo Alto Networks Security Advisories

Found 4
VersionsAffectedUnaffected
iPAN-SA-2025-0005 GlobalProtect Clientless VPN: Clientless VPN Misconfiguration Allows Cross-Site Attacks
Cloud NGFW
PAN-OS
Prisma Access
None
All
All
All
None
None
2025-02-122025-02-12
5.3CVE-2024-3596 PAN-OS: CHAP and PAP When Used with RADIUS Authentication Lead to Privilege Escalation
Cloud NGFW
PAN-OS 11.2
PAN-OS 11.1
PAN-OS 11.0
PAN-OS 10.2
PAN-OS 10.1
PAN-OS 9.1
Prisma Access
None
None
< 11.1.3
< 11.0.4-h5, < 11.0.6
< 10.2.4-h21, < 10.2.7-h21, < 10.2.8-h20, < 10.2.9-h8, < 10.2.10
< 10.1.12-h4, < 10.1.14
< 9.1.19
None
All
All
>= 11.1.3
>= 11.0.4-h5, >= 11.0.6
>= 10.2.4-h21, >= 10.2.7-h21, >= 10.2.8-h20, >= 10.2.9-h8, >= 10.2.10
>= 10.1.12-h4, >= 10.1.14
>= 9.1.19
All
2024-07-102025-04-30
6CVE-2023-48795 Impact of Terrapin SSH Attack
PAN-OS 12.1
PAN-OS 11.2
PAN-OS 11.1
PAN-OS 11.0
PAN-OS 10.2
PAN-OS 10.1
PAN-OS 9.1
PAN-OS 9.0
None
< 11.2.8
< 11.1.8
All
< 10.2.14
All
All
All
All
>= 11.2.8
>= 11.1.8 ¹
None ²
>= 10.2.14 ¹
None
None
None
2024-01-092026-03-10
3CVE-2020-2035 PAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessions
PAN-OS 10.1
PAN-OS 10.0
PAN-OS 9.1
PAN-OS 9.0
PAN-OS 8.1
All without CTD inspection enabled
All
All
All
All
None with CTD inspection enabled
None
None
None
None
2020-08-122021-07-20
© 2026 Palo Alto Networks, Inc. All rights reserved.