Palo Alto Networks Cloud Ngfw vulnerabilities

2 CVEs affecting Palo Alto Networks Cloud Ngfw, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-0301, published 2026-08-13.

More from Palo Alto Networks.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-0287, published 2026-07-09. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending…
• CVE-2026-0301, published 2026-08-13. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive…