Palo Alto Products Multiple Vulnerabilities

Details

Source

HKCERT Security Bulletins (HK · national-cert · site)

Severity

unknown

Published

2026-09-10

Exploitation

Not in CISA KEV at last sync

Original advisory: https://www.hkcert.org/security-bulletin/palo-alto-products-multiple-vulnerabilities_20260910

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• high[NEU] [hoch] Palo Alto Networks PAN-OS: Mehrere Schwachstellencert-bund
• high[NEU] [hoch] Palo Alto Networks GlobalProtect App: Schwachstelle ermöglicht Privilegieneskalationcert-bund
• unknownPalo Alto Networks security advisory (AV26-905)cccs
• unknownCVE-2026-0310: A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-O…nvd
• unknownCVE-2026-0309: A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticat…nvd
• unknownCVE-2026-0308: A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enable…nvd
• unknownCVE-2026-0307: Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ ap…nvd
• mediumCVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)paloalto
• lowCVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: LOW)paloalto
• mediumCVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration (Severity: MEDIUM)paloalto
• highCVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing (Severity: HIGH)paloalto

Recent advisories for Palo Alto Products

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

• unknownPalo Alto Products Multiple Vulnerabilitieshkcert · 2026-08-14
• unknownMultiple vulnerabilities in Palo Alto Networks products (August 13, 2026)cert-fr-avis · 2026-08-13
• unknownPalo Alto Products Multiple Vulnerabilitieshkcert · 2026-07-09
• unknownMultiple vulnerabilities in Palo Alto Networks products (July 09, 2026)cert-fr-avis · 2026-07-09

More from HKCERT Security Bulletins

• unknownMongoDB Multiple Vulnerabilities2026-09-10
• unknownGoogle Chrome Multiple Vulnerabilities2026-09-10
• unknownCitrix Products Multiple Vulnerabilities2026-09-10
• unknownAdobe Monthly Security Update (September 2026)2026-09-09
• unknownMozilla Firefox Denial of Service Vulnerability2026-09-09