basicsecurity.net
Proof, not just disclosure.
Threats / Contributors / Palo Alto Networks
Vendor security team contributor

Palo Alto Networks

cited as evidence in 13 · CNA assigner on 14 · credited finder on 2 of 15 known-exploited records. Every aggregate on this page is recomputed from the records listed below — each one already cited to its public source.

security.paloaltonetworks.com ↗ · home of the cited advisories

15
records cited in
deterministic count
2
finder / reporter credits
CVE.org credits
14
CVE records catalogued (CNA)
assigner
60%
avg modeled exploit prob.
FIRST EPSS, 15/15
33%
ransomware-associated
5 of 15 · CISA flag
01

Known for

— recomputed from this contributor’s own records
SurfacesEdge / remote-access infra (15)
WeaknessAuthentication (5), Injection (4), Cryptography (1), Path traversal / file (1), Memory safety (1)
PortfolioPalo Alto Networks (15)
PeopleNamed individuals credited under this contributor:
Enrique Castillo of Palo Alto Networks · 2
02

Narrative reach

— how far this contributor’s records carry an attacker, front door → lights out
1Front door
15reach this stage
→
2Keys to the kingdom
15reach this stage
→
3Lateral reach
14reach this stage
→
4Data at risk
3reach this stage
→
5Lights out
0reach this stage

Furthest any of these records carries an attacker: 4 · Data at risk. 3 of 15 narrative-framed records reach data-at-risk or lights-out. (furthest-position idiom, reused from the landing map; the stage mapping is a model output over cited evidence.)

03

Recent highlights

— this contributor’s newest known-exploited records
CVE-2026-0257Palo Alto Networks19%KEVCVE-2026-0300Palo Alto Networks32%KEVCVE-2025-0111Palo Alto Networks2%KEVCVE-2025-0108Palo Alto Networks98%KEVCVE-2024-3393Palo Alto Networks27%KEVCVE-2024-0012Palo Alto Networks100%RWKEV
04

Every record they’re cited in

— all 15, each linked to its cited source

This is the evidence behind every number above. Sorted ransomware-first, then by modeled exploit probability.

CVE-2024-3400Palo Alto Networks100%RWKEVCVE-2024-0012Palo Alto Networks100%RWKEVCVE-2024-9474Palo Alto Networks95%RWKEVCVE-2019-1579Palo Alto Networks39%RWKEVCVE-2020-2021Palo Alto Networks4%RWKEVCVE-2024-9465Palo Alto Networks100%KEVCVE-2024-9463Palo Alto Networks98%KEVCVE-2017-15944Palo Alto Networks98%KEVCVE-2025-0108Palo Alto Networks98%KEVCVE-2024-5910Palo Alto Networks92%KEVCVE-2026-0300Palo Alto Networks32%KEVCVE-2024-3393Palo Alto Networks27%KEVCVE-2026-0257Palo Alto Networks19%KEVCVE-2022-0028Palo Alto Networks2%KEVCVE-2025-0111Palo Alto Networks2%KEV
05

Coverage & confidence

— what this profile claims, and what it does not

Established (cited)

  • Cited in 15 known-exploited records — the list below; every one links to its public source.
  • Catalogued 14 CVE record(s) as the CNA assigner (from CVE.org).
  • Credited as the finder/reporter on 2 record(s) (CVE.org credits).

    • Coverage gaps — stated, not hidden

  • This profile is an aggregation: it asserts only what the listed records already cite — no new external claim about the contributor is made.
  • The TYPE badge and the narrative-stage mapping are editorial (our call), labeled as such, not a sourced fact.