PAN-OS — security advisories

vendor: Palo Alto Networks38 advisories14 exploited5 sourceslatest 2026-07-10⚡ RSS feed

Every advisory CSIRTS.com has correlated to PAN-OS, newest first — across national CERTs, vendor PSIRTs and vulnerability databases.

⚡ Watch PAN-OS

Get an email when a new PAN-OS advisory drops — max one per day, one-click unsubscribe.

[NEW] [high] Palo Alto Networks PAN-OS: Multiple vulnerabilities

highCVE-2026-0279 CVE-2026-0280 CVE-2026-0281 CVE-2026-0282cert-bund2026-07-10

CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities (Severity: LOW)

lowCVE-2026-0279paloalto2026-07-08

Palo Alto Networks security advisory (AV26-674)

unknownCVE-2026-0288cccs2026-07-08

CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent (Severity: HIGH)

highCVE-2026-0288paloalto2026-07-08

CVE-2026-0282 PAN-OS: File Deletion Vulnerability in Management Web Interface (Severity: LOW)

lowCVE-2026-0282paloalto2026-07-08

CVE-2026-0283 PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) (Severity: MEDIUM)

mediumCVE-2026-0283paloalto2026-07-08

CVE-2026-0284 PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN) (Severity: MEDIUM)

mediumCVE-2026-0284paloalto2026-07-08

CVE-2026-0286 PAN-OS: Authenticated Command Injection in CLI (Severity: MEDIUM)

mediumCVE-2026-0286paloalto2026-07-08

CVE-2026-0287 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing (Severity: MEDIUM)

mediumCVE-2026-0287paloalto2026-07-08

CVE-2026-0285 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface (Severity: MEDIUM)

mediumCVE-2026-0285paloalto2026-07-08

CVE-2026-0280 PAN-OS: IPv6 Firewall Policy Bypass (Severity: LOW)

lowCVE-2026-0280paloalto2026-07-08

CVE-2026-0281 PAN-OS: Information Disclosure Vulnerability in Management Web Interface (Severity: LOW)

lowCVE-2026-0281paloalto2026-07-08

CVE-2026-0273 PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI (Severity: MEDIUM)

mediumCVE-2026-0273paloalto2026-06-11

CVE-2026-0272 PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI) (Severity: MEDIUM)

mediumCVE-2026-0272paloalto2026-06-10

CVE-2026-0269 PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing (Severity: MEDIUM)

mediumCVE-2026-0269paloalto2026-06-10

CVE-2026-0266 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: LOW)

lowCVE-2026-0266paloalto2026-06-10

CVE-2026-0257 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities (Severity: HIGH)

highexploitedCVE-2026-0257paloalto2026-06-03

CVE-2026-0257: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

criticalexploitedCVE-2026-0257cisa-kev2026-05-29

CVE-2026-0263 PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing (Severity: HIGH)

highCVE-2026-0263paloalto2026-05-28

CVE-2026-0256 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: MEDIUM)

mediumCVE-2026-0256paloalto2026-05-28

CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled (Severity: HIGH)

highCVE-2026-0265paloalto2026-05-28

CVE-2026-0261 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM)

mediumCVE-2026-0261paloalto2026-05-28

CVE-2026-0258 PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching (Severity: MEDIUM)

mediumCVE-2026-0258paloalto2026-05-28

CVE-2026-0264 PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution (Severity: HIGH)

highCVE-2026-0264paloalto2026-05-28

CVE-2026-0262 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing (Severity: MEDIUM)

mediumCVE-2026-0262paloalto2026-05-28

CVE-2026-0300 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal (Severity: CRITICAL)

criticalexploitedCVE-2026-0300paloalto2026-05-28

2026-006: Critical Vulnerability in PAN-OS

criticalCVE-2026-0300cert-eu2026-05-06

CVE-2026-0300: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

criticalexploitedCVE-2026-0300cisa-kev2026-05-06

CVE-2025-0111: Palo Alto Networks PAN-OS File Read Vulnerability

criticalexploitedCVE-2025-0111cisa-kev2025-02-20

CVE-2025-0108: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

criticalexploitedCVE-2025-0108cisa-kev2025-02-18

CVE-2024-3393: Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

criticalexploitedCVE-2024-3393cisa-kev2024-12-30

CVE-2024-9474: Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

criticalexploitedCVE-2024-9474cisa-kev2024-11-18

CVE-2024-0012: Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

criticalexploitedCVE-2024-0012cisa-kev2024-11-18

CVE-2024-3400: Palo Alto Networks PAN-OS Command Injection Vulnerability

criticalexploitedCVE-2024-3400cisa-kev2024-04-12

CVE-2022-0028: Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability

criticalexploitedCVE-2022-0028cisa-kev2022-08-22

CVE-2017-15944: Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

criticalexploitedCVE-2017-15944cisa-kev2022-08-18

CVE-2020-2021: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

criticalexploitedCVE-2020-2021cisa-kev2022-03-25

CVE-2019-1579: Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

criticalexploitedCVE-2019-1579cisa-kev2022-01-10