Approved changes feed: RSS · Atom
cpe:2.3:a:palo_alto_networks:panorama:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Palo Alto Networks (b3fb2ed8-9543-594b-b76a-18c6d89c012d) |
|---|---|
| Product | Panorama (91e4bf37-62d6-5555-aa87-37b5c48f506e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-0280 |
not_vulnerable | 2026-07-29 00:20:50.151677 |
PAN-OS: IPv6 Firewall Policy Bypass
An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network traffic that should be blocked to reach protected services.
Cloud NGFW and Panorama are not impacted by this vulnerability.
Published: 2026-07-09T19:05:24.367Z
Updated: 2026-07-09T19:23:56.125Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0269 |
not_vulnerable | 2026-07-29 00:20:49.923290 |
PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing
A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode.
Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.
Published: 2026-06-10T20:54:29.102Z
Updated: 2026-07-14T12:45:15.961Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0107 |
not_vulnerable | 2026-06-08 07:00:29.279684 |
Expedition: OS Command Injection Vulnerability
An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls running PAN-OS software.
Published: 2025-01-11T03:02:49.517Z
Updated: 2025-01-24T04:56:01.054Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0106 |
not_vulnerable | 2026-06-08 07:00:29.278834 |
Expedition: Wildcard Expansion Vulnerability
A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate files on the host filesystem.
Published: 2025-01-11T03:02:24.574Z
Updated: 2025-01-13T19:48:42.286Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0105 |
not_vulnerable | 2026-06-08 07:00:29.278012 |
Expedition: Arbitrary File Deletion Vulnerability
An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to delete arbitrary files accessible to the www-data user on the host filesystem.
Published: 2025-01-11T03:01:24.168Z
Updated: 2025-01-13T19:50:31.391Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0104 |
not_vulnerable | 2026-06-08 07:00:29.277390 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0103 |
not_vulnerable | 2026-06-08 07:00:29.276538 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.