Palo Alto Networks GlobalProtect

Name: Palo Alto Networks GlobalProtect
Brand: Palo Alto Networks

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical14high3medium2low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-2432US	high7.0	0.39% (33rd)	Exploit	5.1.12	2024-03-13	7 versions
CVE-2025-0117US	—	0.16% (6th)	Exploit	6.2.5	2025-03-12	5 versions
CVE-2024-5921US	high8.8	1.46% (73rd)	—	6.2.6	2024-11-27	< 6.2.6
CVE-2026-0298US	high8.1	0.66% (51st)	—	no fix	2026-08-13	3 versions
CVE-2026-0297US	high8.1	0.60% (48th)	—	no fix	2026-08-13	5 versions
CVE-2025-0118US	high8.0	0.46% (39th)	—	6.0.11	2025-03-12	4 versions
CVE-2025-4232US	high8.8	0.45% (39th)	—	6.3.3	2025-06-13	4 versions
CVE-2024-8687US	high7.1	0.41% (35th)	—	5.1.12	2024-09-11	5 versions
CVE-2026-0250US	high8.1	0.39% (33rd)	—	no fix	2026-05-13	8 versions
CVE-2024-9473US	high7.8	0.29% (21st)	—	6.3	2024-10-09	2 versions
CVE-2020-1976US	medium5.5	0.28% (20th)	—	no fix	2020-02-12	≤ 5.0 ≤5.0.5
CVE-2026-0296US	high7.4	0.26% (17th)	—	no fix	2026-08-13	4 versions
CVE-2026-0251US	high7.8	0.18% (8th)	—	no fix	2026-05-13	6 versions
CVE-2025-0141US	—	0.18% (7th)	—	no fix	2025-07-09	3 versions
CVE-2026-0299US	high7.8	0.17% (6th)	—	no fix	2026-08-13	4 versions
CVE-2025-4227US	low3.5OT elevated	0.16% (6th)	—	6.2.8-h2	2025-06-13	4 versions
CVE-2025-0120US	high7.0	0.16% (5th)	—	6.2.7-h3	2025-04-11	3 versions
CVE-2025-0131US	—	0.16% (5th)	—	no fix	2025-05-14	≤ MetaDefender Endpoint Security SDK <4.3.4451
CVE-2026-0307US	—	0.16% (5th)	—	no fix	2026-09-10	3 versions
CVE-2024-2431US	—	0.15% (4th)	—	5.1.12	2024-03-13	4 versions
CVE-2025-0140US	—	0.15% (4th)	—	no fix	2025-07-09	3 versions
CVE-2025-2179US	—	0.14% (3rd)	—	no fix	2025-07-29	≤ App <6.2.9
CVE-2025-0135US	low3.3	0.14% (3rd)	—	6.2.8	2025-05-14	2 versions
CVE-2025-2183US	—	0.12% (2nd)	—	no fix	2025-08-13	3 versions
CVE-2026-0249US	medium6.5	0.11% (1st)	—	no fix	2026-05-13	7 versions
CVE-2026-0295US	high7.0	0.11% (1st)	—	no fix	2026-08-13	3 versions
CVE-2026-0315US	—	0.10% (1st)	—	6.2.8-h15	2026-10-14	2 versions
CVE-2026-0267US	medium5.5	0.10% (1st)	—	no fix	2026-06-10	2 versions
CVE-2026-0314US	—	0.10% (1st)	—	6.2.8-h15	2026-10-14	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-426Untrusted Search Path5 CVEs
CWE-266Incorrect Privilege Assignment4 CVEs
CWE-295Improper Certificate Validation4 CVEs
CWE-250Execution with Unnecessary Privileges2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-155Improper Neutralization of Wildcards or Matching Symbols1 CVEs
CWE-20Improper Input Validation1 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)28 CVEs
EUEU Vulnerability Database (ENISA)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan