Filtered by vendor Paloaltonetworks
Subscribe
Total
386 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-109619 | 3 Paloaltonetworks, Php, Siemens | 12 Pan-os, Panorama M-200, Panorama M-300 and 9 more | 2026-10-30 | N/A | 8.1 HIGH |
| PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE). | |||||
| CVE-2026-109618 | 3 Paloaltonetworks, Php, Siemens | 12 Pan-os, Panorama M-200, Panorama M-300 and 9 more | 2026-10-30 | N/A | 9.8 CRITICAL |
| PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE). | |||||
| CVE-2026-0233 | 2 Microsoft, Paloaltonetworks | 2 Windows, Autonomous Digital Experience Manager | 2026-10-26 | N/A | 8.8 HIGH |
| A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges. | |||||
| CVE-2026-0232 | 2 Microsoft, Paloaltonetworks | 2 Windows, Cortex Xdr Agent | 2026-10-26 | N/A | 4.4 MEDIUM |
| A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent. This issue may be leveraged by malware to perform malicious activity without detection. | |||||
| CVE-2026-0234 | 1 Paloaltonetworks | 2 Cortex Xsiam, Cortex Xsoar | 2026-10-26 | N/A | 9.1 CRITICAL |
| An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources. | |||||
| CVE-2026-0300 | 2 Paloaltonetworks, Siemens | 50 Pa-1410, Pa-1420, Pa-3410 and 47 more | 2026-10-26 | N/A | 9.8 CRITICAL |
| A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. The risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses. Prisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability. | |||||
| CVE-2026-0263 | 1 Paloaltonetworks | 1 Pan-os | 2026-10-26 | N/A | 9.8 CRITICAL |
| A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall, or cause a denial of service (DoS) condition. Panorama, Cloud NGFW, and Prisma® Access are not impacted by these vulnerabilities. | |||||
| CVE-2026-0265 | 2 Paloaltonetworks, Siemens | 3 Pan-os, Ruggedcom Ape1808, Ruggedcom Ape1808 Firmware | 2026-10-26 | N/A | 8.1 HIGH |
| An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service (CAS) is enabled. The risk is higher if CAS is enabled on the management interface and lower when any other login interfaces are used. The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma Access® are not impacted by this vulnerability. | |||||
| CVE-2026-0237 | 2 Apple, Paloaltonetworks | 2 Macos, Prisma Browser | 2026-10-26 | N/A | 7.8 HIGH |
| An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls. | |||||
| CVE-2026-0262 | 2 Paloaltonetworks, Siemens | 3 Pan-os, Ruggedcom Ape1808, Ruggedcom Ape1808 Firmware | 2026-10-26 | N/A | 7.5 HIGH |
| Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic. Panorama and Cloud NGFW are not impacted by these vulnerabilities. | |||||
| CVE-2026-0259 | 1 Paloaltonetworks | 3 Pan-os, Wf-500, Wf-500-b | 2026-10-26 | N/A | 8.8 HIGH |
| An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables users to read sensitive information and delete arbitrary files. This vulnerability affects WF-500 and WF-500-B appliances running in the default non-FIPS configuration mode. The WildFire Appliance (WF-500, WF-500-B) software update is now available to customers that use the WildFire Appliance (WF-500, WF-500-B) for on-premise sandboxing. Please note that customers using the WildFire Public cloud service are NOT impacted by this vulnerability. | |||||
| CVE-2026-0264 | 2 Paloaltonetworks, Siemens | 3 Pan-os, Ruggedcom Ape1808, Ruggedcom Ape1808 Firmware | 2026-10-26 | N/A | 9.8 CRITICAL |
| A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a denial of service (DoS) condition (all PAN-OS platforms except Cloud NGFW and Prisma Access) or potentially execute arbitrary code by sending specially crafted network traffic (PA-Series hardware only). Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability. | |||||
| CVE-2026-0261 | 2 Paloaltonetworks, Siemens | 3 Pan-os, Ruggedcom Ape1808, Ruggedcom Ape1808 Firmware | 2026-10-26 | N/A | 7.2 HIGH |
| Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI or Web UI. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators and by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma Access® are not impacted by these vulnerabilities. | |||||
| CVE-2026-0249 | 1 Paloaltonetworks | 1 Globalprotect | 2026-10-26 | N/A | 6.5 MEDIUM |
| Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software. The GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected. | |||||
| CVE-2026-0236 | 2 Apple, Paloaltonetworks | 2 Macos, Prisma Browser | 2026-10-26 | N/A | 7.8 HIGH |
| A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser. | |||||
| CVE-2026-0251 | 1 Paloaltonetworks | 1 Globalprotect | 2026-10-26 | N/A | 7.8 HIGH |
| Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected. | |||||
| CVE-2026-0240 | 1 Paloaltonetworks | 1 Trust Protection Foundation | 2026-10-26 | N/A | 8.7 HIGH |
| An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploitation of this issue allows the attacker to impersonate any user within the environment and arbitrarily modify configuration settings. | |||||
| CVE-2026-0247 | 3 Apple, Microsoft, Paloaltonetworks | 3 Macos, Windows, Prisma Access Agent | 2026-10-26 | N/A | 7.8 HIGH |
| Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations. | |||||
| CVE-2026-0239 | 1 Paloaltonetworks | 1 Chronosphere Collector | 2026-10-26 | N/A | 6.5 MEDIUM |
| An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with network access to the collector service to retrieve sensitive information. | |||||
| CVE-2026-0244 | 1 Paloaltonetworks | 20 Ion 1200, Ion 1200-c-na, Ion 1200-c-row and 17 more | 2026-10-26 | N/A | 8.1 HIGH |
| An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller. | |||||