Palo Alto Products Multiple Vulnerabilities
CSIRTS triage
- What
- Multiple vulnerabilities exist in Palo Alto products.
- Who is affected
- Deployments of Palo Alto products are affected.
- Urgency
- Remediation is necessary due to the potential for exploitation, though the severity is currently unknown.
- Action
- Consult Palo Alto's security advisories for patches or mitigations.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Palo Alto Products
Get an email when a new Palo Alto Products advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.hkcert.org/security-bulletin/palo-alto-products-multiple-vulnerabilities_20260709
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Moderate exploitation riskCVE-2026-02791.2% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 64% of all scored CVEs.
- Low exploitation riskCVE-2026-02800.47% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 38% of all scored CVEs.
- Low exploitation riskCVE-2026-02810.36% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 28% of all scored CVEs.
- Low exploitation riskCVE-2026-02820.36% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 28% of all scored CVEs.
- Low exploitation riskCVE-2026-02830.58% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 43% of all scored CVEs.
- Low exploitation riskCVE-2026-02840.50% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 39% of all scored CVEs.
- Low exploitation riskCVE-2026-02850.49% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 39% of all scored CVEs.
- Moderate exploitation riskCVE-2026-02861.1% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 62% of all scored CVEs.
- Low exploitation riskCVE-2026-02870.53% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 41% of all scored CVEs.
- Low exploitation riskCVE-2026-02880.52% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 41% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-0279 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-0280 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-0281 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-0282 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-0283 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-0284 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-0285 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-0286 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-0287 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-0288 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- high[NEW] [high] Palo Alto Networks PAN-OS: Multiple vulnerabilitiescert-bund
- unknownCVE-2026-0287: Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unau…nvd
- unknownCVE-2026-0286: A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® softwar…nvd
- unknownCVE-2026-0285: A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enable…nvd
- unknownCVE-2026-0284: An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networ…nvd
- unknownCVE-2026-0283: An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto N…nvd
- unknownCVE-2026-0282: A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated…nvd
- unknownCVE-2026-0281: An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unaut…nvd
- unknownCVE-2026-0280: An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software…nvd
- unknownCVE-2026-0279: Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captiv…nvd
- unknownMultiple vulnerabilities in Palo Alto Networks products (July 09, 2026)cert-fr-avis
- highCVE-2026-0288: Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component o…nvd
Recent advisories for Palo Alto Products
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- unknownMultiple vulnerabilities in Palo Alto Networks products (July 09, 2026)cert-fr-avis · 2026-07-09
More from HKCERT Security Bulletins
- unknownGoogle Chrome Multiple Vulnerabilities2026-07-09
- unknownJuniper Junos OS Multiple Vulnerabilities2026-07-09
- unknownBeyondTrust Products Multiple Vulnerabilities2026-07-08
- unknownApple Products Multiple Vulnerabilities2026-07-06
- unknownDebian Linux Kernel Multiple Vulnerabilities2026-07-06