Palo Alto Networks Cloud NGFW

Name: Palo Alto Networks Cloud NGFW
Brand: Palo Alto Networks

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical4high10medium2low

updated 2026-10-27

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-0133US	—	46.3% (99th)	Exploit	11.2.8	2025-05-14	All → 11.2.8
CVE-2023-6792US	medium6.3	1.15% (67th)	—	no fix	2023-12-13	—
CVE-2023-6795US	medium4.7	1.14% (67th)	—	no fix	2023-12-13	—
CVE-2024-3384US	high7.5	0.89% (59th)	—	no fix	2024-04-10	—
CVE-2026-0288US	high7.5	0.83% (57th)	—	All	2026-07-08	< All
CVE-2026-0310US	—	0.67% (52nd)	—	no fix	2026-09-10	≤ vers:unknown/*
CVE-2023-6790US	medium6.1	0.66% (51st)	—	no fix	2023-12-13	—
CVE-2026-0287US	high7.5	0.62% (50th)	—	no fix	2026-07-09	≤ All
CVE-2024-3383US	critical9.1	0.58% (47th)	—	no fix	2024-04-10	—
CVE-2023-6794US	medium4.7	0.57% (47th)	—	no fix	2023-12-13	—
CVE-2025-0127US	—	0.57% (47th)	—	no fix	2025-04-11	—
CVE-2026-0301US	high7.5	0.56% (46th)	—	no fix	2026-08-13	≤ All
CVE-2023-6793US	low2.7	0.56% (46th)	—	no fix	2023-12-13	—
CVE-2024-0010US	medium6.1	0.51% (43rd)	—	no fix	2024-02-14	—
CVE-2025-4229US	—	0.51% (43rd)	—	no fix	2025-06-13	—
CVE-2025-0125US	—	0.42% (36th)	—	no fix	2025-04-11	—
CVE-2025-0137US	—	0.42% (36th)	—	no fix	2025-05-14	—
CVE-2023-6789US	medium4.8	0.41% (36th)	—	no fix	2023-12-13	—
CVE-2025-0126US	—	0.40% (34th)	—	no fix	2025-04-11	—
CVE-2025-0124US	low3.8	0.35% (29th)	—	no fix	2025-04-11	≤ All
CVE-2024-3388US	medium5.0OT elevated	0.35% (28th)	—	no fix	2024-04-10	—
CVE-2025-0128US	—	0.32% (25th)	—	no fix	2025-04-11	—
CVE-2024-5916US	medium4.4OT elevated	0.25% (16th)	—	no fix	2024-08-14	2 versions
CVE-2024-5913US	medium6.8	0.23% (14th)	—	no fix	2024-07-10	≤ None
CVE-2024-3387US	medium5.9	0.17% (6th)	—	no fix	2024-04-10	—
CVE-2025-0136US	—OT elevated	0.17% (6th)	—	no fix	2025-05-14	—
CVE-2025-0123US	—OT elevated	0.12% (2nd)	—	no fix	2025-04-11	—
CVE-2025-2182US	—OT elevated	0.12% (2nd)	—	no fix	2025-08-13	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-312Cleartext Storage of Sensitive Information3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-264CWE-2642 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-754Improper Check for Unusual or Exceptional Conditions2 CVEs
CWE-787Out-of-bounds Write2 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)27 CVEs
NLNCSC-NL (CSAF)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan