Palo Alto Networks — security advisories

56 advisories17 exploitedlatest 2026-07-10⚡ RSS feed

Tracked Palo Alto Networks products:

PAN-OS Expedition Palo Alto Networks devices GlobalProtect Prisma Access Agent Cortex XDR Broker VM Chromium and Prisma Browser GlobalProtect App Cortex XSOAR Prisma SD-WAN ION WildFire WF-500

⚡ Watch Palo Alto Networks

Get an email when a new Palo Alto Networks advisory drops — max one per day, one-click unsubscribe.

[NEW] [high] Palo Alto Networks PAN-OS: Multiple vulnerabilities

highCVE-2026-0279 CVE-2026-0280 CVE-2026-0281 CVE-2026-0282cert-bund2026-07-10

[NEW] [medium] Palo Alto Networks Cortex XDR Broker VM: Vulnerability allows privilege escalation

mediumCVE-2026-0276cert-bund2026-07-10

Multiple vulnerabilities in Palo Alto Networks products (July 09, 2026)

unknownCVE-2026-10927 CVE-2026-10991 CVE-2026-11637 CVE-2026-11239cert-fr-avis2026-07-09

CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities (Severity: LOW)

lowCVE-2026-0279paloalto2026-07-08

Palo Alto Networks security advisory (AV26-674)

unknownCVE-2026-0288cccs2026-07-08

CVE-2026-0278 Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows (Severity: MEDIUM)

mediumCVE-2026-0278paloalto2026-07-08

CVE-2026-0285 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface (Severity: MEDIUM)

mediumCVE-2026-0285paloalto2026-07-08

CVE-2026-0280 PAN-OS: IPv6 Firewall Policy Bypass (Severity: LOW)

lowCVE-2026-0280paloalto2026-07-08

CVE-2026-0284 PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN) (Severity: MEDIUM)

mediumCVE-2026-0284paloalto2026-07-08

CVE-2026-0287 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing (Severity: MEDIUM)

mediumCVE-2026-0287paloalto2026-07-08

CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent (Severity: HIGH)

highCVE-2026-0288paloalto2026-07-08

CVE-2026-0277 Prisma Access Agent: Improper Certificate Validation on iOS (Severity: MEDIUM)

mediumCVE-2026-0277paloalto2026-07-08

CVE-2026-0286 PAN-OS: Authenticated Command Injection in CLI (Severity: MEDIUM)

mediumCVE-2026-0286paloalto2026-07-08

CVE-2026-0283 PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) (Severity: MEDIUM)

mediumCVE-2026-0283paloalto2026-07-08

CVE-2026-0282 PAN-OS: File Deletion Vulnerability in Management Web Interface (Severity: LOW)

lowCVE-2026-0282paloalto2026-07-08

CVE-2026-0276 Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability (Severity: LOW)

lowCVE-2026-0276paloalto2026-07-08

PAN-SA-2026-0010 Chromium and Prisma Browser: Monthly Vulnerability Update (July 2026) (Severity: HIGH)

highCVE-2026-10881 CVE-2026-10882 CVE-2026-10883 CVE-2026-10884paloalto2026-07-08

CVE-2026-0281 PAN-OS: Information Disclosure Vulnerability in Management Web Interface (Severity: LOW)

lowCVE-2026-0281paloalto2026-07-08

CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM)

mediumCVE-2026-0250paloalto2026-06-13

CVE-2026-0273 PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI (Severity: MEDIUM)

mediumCVE-2026-0273paloalto2026-06-11

CVE-2026-0269 PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing (Severity: MEDIUM)

mediumCVE-2026-0269paloalto2026-06-10

CVE-2026-0267 GlobalProtect App: Information Exposure Vulnerability on macOS (Severity: MEDIUM)

mediumCVE-2026-0267paloalto2026-06-10

CVE-2026-0271 Prisma Access Agent: Local Privilege Escalation by Authorized Users (Severity: MEDIUM)

mediumCVE-2026-0271paloalto2026-06-10

PAN-SA-2026-0009 Informational Bulletin: Impact assessment of OSS CVEs in Prisma SD-WAN ION (Severity: INFORMATIONAL)

unknownCVE-2026-35385 CVE-2026-35386 CVE-2026-35388 CVE-2026-35387paloalto2026-06-10

CVE-2026-0274 Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration (Severity: HIGH)

highCVE-2026-0274paloalto2026-06-10

CVE-2026-0270 Cortex XSOAR: Path Traversal Vulnerability (Severity: MEDIUM)

mediumCVE-2026-0270paloalto2026-06-10

CVE-2026-0266 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: LOW)

lowCVE-2026-0266paloalto2026-06-10

CVE-2026-0268 Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux (Severity: MEDIUM)

mediumCVE-2026-0268paloalto2026-06-10

CVE-2026-0272 PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI) (Severity: MEDIUM)

mediumCVE-2026-0272paloalto2026-06-10

CVE-2026-0257 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities (Severity: HIGH)

highexploitedCVE-2026-0257paloalto2026-06-03

CVE-2026-0257: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

criticalexploitedCVE-2026-0257cisa-kev2026-05-29

CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled (Severity: HIGH)

highCVE-2026-0265paloalto2026-05-28

CVE-2026-0256 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: MEDIUM)

mediumCVE-2026-0256paloalto2026-05-28

CVE-2026-0261 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM)

mediumCVE-2026-0261paloalto2026-05-28

CVE-2026-0262 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing (Severity: MEDIUM)

mediumCVE-2026-0262paloalto2026-05-28

CVE-2026-0263 PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing (Severity: HIGH)

highCVE-2026-0263paloalto2026-05-28

CVE-2026-0259 WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B) (Severity: MEDIUM)

mediumCVE-2026-0259paloalto2026-05-28

CVE-2026-0258 PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching (Severity: MEDIUM)

mediumCVE-2026-0258paloalto2026-05-28

CVE-2026-0264 PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution (Severity: HIGH)

highCVE-2026-0264paloalto2026-05-28

CVE-2026-0300 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal (Severity: CRITICAL)

criticalexploitedCVE-2026-0300paloalto2026-05-28

CVE-2026-0300: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

criticalexploitedCVE-2026-0300cisa-kev2026-05-06

CVE-2025-0111: Palo Alto Networks PAN-OS File Read Vulnerability

criticalexploitedCVE-2025-0111cisa-kev2025-02-20

CVE-2025-0108: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

criticalexploitedCVE-2025-0108cisa-kev2025-02-18

CVE-2024-3393: Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

criticalexploitedCVE-2024-3393cisa-kev2024-12-30

CVE-2024-0012: Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

criticalexploitedCVE-2024-0012cisa-kev2024-11-18

CVE-2024-9474: Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

criticalexploitedCVE-2024-9474cisa-kev2024-11-18

[Update] Multiple vulnerabilities on the administration interface of Palo Alto Networks devices (November 15, 2024)

unknownCVE-2024-0012 CVE-2024-9474cert-fr-alerte2024-11-15

CVE-2024-9463: Palo Alto Networks Expedition OS Command Injection Vulnerability

criticalexploitedCVE-2024-9463cisa-kev2024-11-14

CVE-2024-9465: Palo Alto Networks Expedition SQL Injection Vulnerability

criticalexploitedCVE-2024-9465cisa-kev2024-11-14

CVE-2024-5910: Palo Alto Networks Expedition Missing Authentication Vulnerability

criticalexploitedCVE-2024-5910cisa-kev2024-11-07

[Update] Vulnerability in Palo Alto Networks GlobalProtect (April 12, 2024)

unknownCVE-2024-3400cert-fr-alerte2024-04-12

CVE-2024-3400: Palo Alto Networks PAN-OS Command Injection Vulnerability

criticalexploitedCVE-2024-3400cisa-kev2024-04-12

CVE-2022-0028: Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability

criticalexploitedCVE-2022-0028cisa-kev2022-08-22

CVE-2017-15944: Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

criticalexploitedCVE-2017-15944cisa-kev2022-08-18

CVE-2020-2021: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

criticalexploitedCVE-2020-2021cisa-kev2022-03-25

CVE-2019-1579: Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

criticalexploitedCVE-2019-1579cisa-kev2022-01-10