Palo Alto Networks security advisory (AV26-674)

unknownCVE-2026-0288

Serial number: AV26-674 Date: July 8, 2026 On July 8, 2026, Palo Alto Networks published security advisories to address vulnerabilities in the following products: PAN-OS 12.1 – versions prior to 12.1.4-h8 PAN-OS 12.1 – versions prior to 12.1.7-h2 PAN-OS 12.1 – versions prior to 12.1.8 PAN-OS 11.2 – versions prior to 11.2.4-h20 PAN-OS 11.2 – versions prior to 11.2.7-h18 PAN-OS 11.2 – versions prior to 11.2.10-h12 PAN-OS 11.2 – versions prior to 11.2.13 PAN-OS 11.1 – versions prior to 11.1.4-h35 PAN-OS 11.1 – versions prior to 11.1.6-h35 PAN-OS 11.1 – versions prior to 11.1.7.h8 PAN-OS 11.1 – versions prior to 11.1.10-h30 PAN-OS 11.1 – versions prior to 11.1.13-h9 PAN-OS 11.1 – versions prior to 11.1.16 PAN-OS 10.2 – versions prior to 10.2.7-h36 PAN-OS 10.2 – versions prior to 10.2.10-h39 PAN-OS 10.2 – versions prior to 10.2.13-h23 PAN-OS 10.2 – versions prior to 10.2.16-h9 PAN-OS 10.2 – versions prior to 10.2.18-h8 Prisma Access 11.20.0 – versions prior to 11.2.7-h18 Prisma Access 10.2.0 – versions prior to 10.2.10-h39 Prisma Browser – versions prior to 149.10.3.53 The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations, and apply the necessary updates. PAN-SA-2026-0010 Chromium: Monthly Vulnerability Update (July 2026) CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent Palo Alto Network Security Advisories

CSIRTS triage

vendor: Palo Alto Networks product: PAN-OSaffected: various versions prior to specified patches

What: Multiple vulnerabilities have been identified in PAN-OS.
Who is affected: Users of PAN-OS versions prior to the specified patches are affected.
Urgency: Remediation is necessary as vulnerabilities exist, but exploitation status is not confirmed.
Action: Users should upgrade to the specified patched versions of PAN-OS.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch PAN-OS

Get an email when a new PAN-OS advisory drops — max one per day, one-click unsubscribe.

Details

Source: Canadian Centre for Cyber Security (CA · national-cert · site)
Severity: unknown
Published: 2026-07-08
Exploitation: Not in CISA KEV at last sync

Original advisory: https://cyber.gc.ca/en/alerts-advisories/palo-alto-networks-security-advisory-av26-674

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-02880.52% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 41% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-0288	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for Palo Alto Networks

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

high[NEW] [high] Palo Alto Networks PAN-OS: Multiple vulnerabilitiescert-bund · 2026-07-10
medium[NEW] [medium] Palo Alto Networks Cortex XDR Broker VM: Vulnerability allows privilege escalationcert-bund · 2026-07-10
unknownCVE-2026-0276: A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a loca…nvd · 2026-07-09
unknownCVE-2026-0275: A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a local…nvd · 2026-07-09
unknownCVE-2026-0287: Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unau…nvd · 2026-07-09
unknownCVE-2026-0286: A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® softwar…nvd · 2026-07-09