Approved changes feed: RSS · Atom

cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h13:*:*:*:*:*:*

part: o version: 10.1.14 update: h13

VendorPaloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a)
ProductPan Os (8e12cd69-24a5-542d-b766-327e8d373bac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0227 vulnerable 2026-06-08 07:47:11.005651 PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal
A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode.
Published: 2026-01-15T18:45:08.579Z
Updated: 2026-01-30T23:36:56.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0137 vulnerable 2026-06-08 07:00:29.655448 PAN-OS: Improper Neutralization of Input in the Management Web Interface
An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator. The attacker must have network access to the management web interface to exploit this issue. You greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .
Published: 2025-05-14T18:09:32.036Z
Updated: 2025-05-14T20:49:31.100Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0136 not_vulnerable 2026-06-08 07:00:29.651474 PAN-OS: Unencrypted Data Transfer when using AES-128-CCM on Intel-based hardware devices
Using the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks PAN-OS® firewalls (PA-7500, PA-5400, PA-5400f, PA-3400, PA-1600, PA-1400, and PA-400 Series) leads to unencrypted data transfer to devices that are connected to the PAN-OS firewall through IPSec. This issue does not affect Cloud NGFWs, Prisma® Access instances, or PAN-OS VM-Series firewalls. NOTE: The AES-128-CCM encryption algorithm is not recommended for use.
Published: 2025-05-14T18:12:14.153Z
Updated: 2025-05-14T19:43:47.169Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.