boxscore/security
PRODUCT · referenceProducts · latest edition

Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

PAN-OS

Product reference — PAN-OS by Palo Alto Networks · sector: Network & Infrastructure. Cumulative disclosure record for this product across the archive.

Follow PAN-OS — Atom feed

Product totals

Disclosures & known-exploited
All-timeYTD
CVEs4133
KEV entries113
Rate & severity
KEV/100Med CVSSMed EPSSCHML
26.86.1.0047410189

KEV/100 = KEV entries ÷ CVEs × 100. Med CVSS / Med EPSS are medians over this product's disclosures. C/H/M/L = disclosures by CVSS severity band.

Monthly disclosures

Trend (by first-seen month, full archive): ▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▂▁▁▁▁▁▁▂▂▁▂▁▁▁▁▁▁▁▁▁▁▁▁▁▁▇▄█▂▃▆

Last 12 months (new CVEs by first-seen day)
MonthNew CVEs
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-058
2026-064
2026-0710
2026-081
2026-093
2026-107

Notable CVEs

Ranked by the published formula: KEV → EPSS → CVSS → CVE ID.

Notable (ranked)
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2024-340010.0100.0CRITICALYES2024-04-12
CVE-2024-00129.3100.0CRITICALYES2024-11-18
CVE-2025-01088.899.9HIGHYES2025-02-12
CVE-2026-02577.899.9HIGHYES2026-05-13
CVE-2024-94746.999.9MEDIUMYES2024-11-18
CVE-2026-03009.398.3CRITICALYES2026-05-06
CVE-2024-33938.798.2HIGHYES2024-12-27
CVE-2020-202110.091.1CRITICALYES2020-06-29
CVE-2022-00288.684.7HIGHYES2022-08-10
CVE-2025-01117.180.4HIGHYES2025-02-12
CVE-2026-03228.668.1HIGHYES2026-10-14
CVE-2026-02866.076.5MEDIUM—2026-07-09
CVE-2026-02616.172.1MEDIUM—2026-05-13
CVE-2026-02736.170.8MEDIUM—2026-06-10
CVE-2026-02657.263.8HIGH—2026-05-13

Recent CVEs

Most recently seen
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2026-03206.157.1MEDIUM—2026-10-14
CVE-2026-03228.668.1HIGHYES2026-10-14
CVE-2026-03184.623.1MEDIUM—2026-10-14
CVE-2026-03161.117.2LOW—2026-10-14
CVE-2026-03171.221.1LOW—2026-10-14
CVE-2026-03194.919.0MEDIUM—2026-10-14
CVE-2026-03216.624.1MEDIUM—2026-10-14
CVE-2026-03107.237.2HIGH—2026-09-10
CVE-2026-03094.042.2MEDIUM—2026-09-10
CVE-2026-03081.118.7LOW—2026-09-10
CVE-2026-03011.724.3LOW—2026-08-13
CVE-2026-02876.648.7MEDIUM—2026-07-09
CVE-2026-02866.076.5MEDIUM—2026-07-09
CVE-2026-02854.736.0MEDIUM—2026-07-09
CVE-2026-02844.738.8MEDIUM—2026-07-09

KEV entries

CISA Known Exploited Vulnerabilities (newest addition first)
CVEKEV addedCVSSEPSS %ileSeverity
CVE-2026-03222026-10-148.668.1HIGH
CVE-2026-02572026-05-297.899.9HIGH
CVE-2026-03002026-05-069.398.3CRITICAL
CVE-2025-01112025-02-207.180.4HIGH
CVE-2025-01082025-02-188.899.9HIGH
CVE-2024-33932024-12-308.798.2HIGH
CVE-2024-94742024-11-186.999.9MEDIUM
CVE-2024-00122024-11-189.3100.0CRITICAL
CVE-2024-34002024-04-1210.0100.0CRITICAL
CVE-2022-00282022-08-228.684.7HIGH
CVE-2020-20212022-03-2510.091.1CRITICAL

Related

Vendor: Palo Alto Networks — all products and the full vendor record.

Methodology

A product is a (vendor, product) pair as named in the affected-product data. Rate statistics are arithmetic over published figures. Counts key to first-seen day. Raw counts are not comparable across products; this is a reference page assembled from the public record, not a ranking by our judgment.

Sources. CVE Program (cvelistV5), NVD (NIST), CISA KEV, FIRST EPSS.