Palo Alto Networks security advisories

Date	Advisory	Severity	Fixed in
Sep 10	Palo Alto Networks Checkov by Prisma Cloud: code execution Low2.4Sep 10 CVE-2026-03033.2.532	Low2.4	3.2.532
Sep 10	Palo Alto Networks Cortex XDR Broker VM: privilege escalation Medium4.8Sep 10 CVE-2026-030432.0.52	Medium4.8	32.0.52
Sep 10	Palo Alto Networks Checkov by Prisma Cloud: command injection Low1.1Sep 10 CVE-2026-03023.2.502	Low1.1	3.2.502
Sep 10	Palo Alto Networks Cloud NGFW: buffer overflow High7.2Sep 10 CVE-2026-031012.2.3+4 more	High7.2	12.2.3+4 more
Sep 10	Palo Alto Networks Prisma: local user could bypass configured DLP policy... Medium5.8Sep 10 CVE-2026-030626.2	Medium5.8	26.2
Sep 10	Palo Alto Networks GlobalProtect App: privilege escalation Medium5.9Sep 10 CVE-2026-03076.3.3-h15+2 more	Medium5.9	6.3.3-h15+2 more
Sep 10	Palo Alto Networks PAN-OS: cross-site scripting Low1.1Sep 10 CVE-2026-030812.1.10+2 more	Low1.1	12.1.10+2 more
Sep 10	Palo Alto Networks PAN-OS: command injection Medium4.0Sep 10 CVE-2026-030912.2.3+3 more	Medium4.0	12.2.3+3 more
Sep 10	Palo Alto Networks Prisma Access Agent: information disclosure Medium4.3Sep 10 CVE-2026-030526.2	Medium4.3	26.2
Aug 13	Palo Alto Networks Cloud NGFW: information disclosure Low1.7Aug 13 CVE-2026-030111.1.16-h1+2 more	Low1.7	11.1.16-h1+2 more
Aug 13	Palo Alto Networks GlobalProtect App: buffer overflow Medium5.2Aug 13 CVE-2026-02976.3.3-h15+4 more	Medium5.2	6.3.3-h15+4 more
Aug 13	Palo Alto Networks GlobalProtect App: improper input validation Medium5.2Aug 13 CVE-2026-02986.3.3-h14+2 more	Medium5.2	6.3.3-h14+2 more
Aug 13	Palo Alto Networks GlobalProtect App: privilege escalation Medium5.9Aug 13 CVE-2026-02996.3.3-h15+3 more	Medium5.9	6.3.3-h15+3 more
Aug 13	Palo Alto Networks Prisma: local attacker could bypass the anti-tamper... Medium5.6Aug 13 CVE-2026-029326.3	Medium5.6	26.3
Aug 13	Palo Alto Networks Prisma Access Agent: privilege escalation Medium6.0Aug 13 CVE-2026-029426.3	Medium6.0	26.3
Aug 13	Palo Alto Networks GlobalProtect App: race condition Medium4.1Aug 13 CVE-2026-02956.3.3-h14 (6.3.3-1121)+2 more	Medium4.1	6.3.3-h14 (6.3.3-1121)+2 more
Aug 13	Palo Alto Networks GlobalProtect App: improper certificate validation Medium4.5Aug 13 CVE-2026-02966.3.3-h15+3 more	Medium4.5	6.3.3-h15+3 more
Aug 13	Palo Alto Networks Prisma Browser: weakly protected credentials Low0.5Aug 13 CVE-2026-0289150.49.4.125	Low0.5	150.49.4.125
Aug 13	Palo Alto Networks Prisma Browser: information disclosure Low0.5Aug 13 CVE-2026-0290148.18.4.217	Low0.5	148.18.4.217
Aug 13	Palo Alto Networks Prisma Access Agent: link following Low1.1Aug 13 CVE-2026-029126.2.2	Low1.1	26.2.2
Aug 13	Palo Alto Networks Prisma Access Agent: authentication bypass Low2.1Aug 13 CVE-2026-029226.3	Low2.1	26.3
Jul 9	Palo Alto Networks Prisma Browser: privilege escalation Low2.0Jul 9 CVE-2026-0275150.33.2.46	Low2.0	150.33.2.46
Jul 9	Palo Alto Networks Cortex XDR Broker VM: privilege escalation Low1.1Jul 9 CVE-2026-027631.0.58	Low1.1	31.0.58
Jul 9	Palo Alto Networks Prisma Access Agent: improper certificate validation Medium5.7Jul 9 CVE-2026-027726.2.1	Medium5.7	26.2.1
Jul 9	Palo Alto Networks Prisma: local user could bypass DLP policy enforcement... Medium5.8Jul 9 CVE-2026-027826.2.1	Medium5.8	26.2.1
Jul 9	Palo Alto Networks PAN-OS: command injection Medium6.0Jul 9 CVE-2026-028612.1.8+3 more	Medium6.0	12.1.8+3 more
Jul 9	Palo Alto Networks Cloud NGFW: denial of service Medium6.6Jul 9 CVE-2026-028712.1.4-h8+5 more	Medium6.6	12.1.4-h8+5 more
Jul 9	Palo Alto Networks PAN-OS: information disclosure Medium4.7Jul 9 CVE-2026-028412.1.4-h8+3 more	Medium4.7	12.1.4-h8+3 more
Jul 9	Palo Alto Networks PAN-OS: server-side request forgery Medium4.7Jul 9 CVE-2026-028512.1.8+3 more	Medium4.7	12.1.8+3 more
Jul 9	Palo Alto Networks PAN-OS: unauthenticated attacker could the management web... Low2.7Jul 9 CVE-2026-028212.1.8+3 more	Low2.7	12.1.8+3 more
Jul 9	Palo Alto Networks PAN-OS: authentication bypass Medium4.5Jul 9 CVE-2026-028312.1.8+3 more	Medium4.5	12.1.8+3 more
Jul 9	Palo Alto Networks PAN-OS: unauthenticated attacker could bypass firewall... Low1.7Jul 9 CVE-2026-028012.1.8+5 more	Low1.7	12.1.8+5 more
Jul 9	Palo Alto Networks PAN-OS: information disclosure Low2.1Jul 9 CVE-2026-028112.1.8+3 more	Low2.1	12.1.8+3 more
Jul 9	Palo Alto Networks PAN-OS: cross-site scripting Low1.3Jul 9 CVE-2026-027912.1.8+3 more	Low1.3	12.1.8+3 more
Jul 8	Palo Alto Networks PAN-OS: buffer overflow High7.2Jul 8 CVE-2026-028812.1.8+5 more	High7.2	12.1.8+5 more

About Palo Alto Networks

Palo Alto Networks, Inc. is an American multinational cybersecurity company with headquarters in Santa Clara, California. The core product is a platform that includes advanced firewalls and cloud-based offerings that extend those firewalls to cover other aspects of security.

Elsewhere on fru.dev: Acquisitions · Quarterly · Paydays · TechConf

Critical advisories by email