Skip to content
OpenAdvisories

Category

Network devices

11,125 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 2.4
    CVE-2026-0303 Public exploit

    Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

    A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.

    Palo Alto Networks Checkov by Prisma Cloud Network devices
  • Low 2.7
    CVE-2026-0265 Public exploit

    PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled

    An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service (CAS) is enabled. The risk is higher if CAS is enabled on…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Low 2.7
    CVE-2025-0133 Public exploit EPSS 46%

    PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal

    A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when they …

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Low 1.7
    CVE-2024-21754 Public exploit

    A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 a…

    Fortinet FortiOS FortiProxy Network devices
  • Low 3.5
    CVE-2023-26209 Public exploit

    A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiDeceptor 3.1.x and…

    Fortinet FortiDeceptor Network devices
  • Low 3.5
    CVE-2023-26208 Public exploit

    A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.…

    Fortinet FortiAuthenticator Network devices
  • Low 3.5
    CVE-2022-29056 Public exploit

    A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0…

    Fortinet FortiMail Network devices
  • Low 3.3
    CVE-2021-44168 Exploited Public exploit

    A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0…

    Fortinet Fortinet FortiOS Network devices
    KEV Dec 10, 2021