AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Palo Alto Networks security advisories

35 advisories · 2 critical or high in 12 months · latest Sep 10

Advisories page

35 advisories

Low 2.4Sep 10Palo Alto Networks Checkov by Prisma Cloud: code executionCVE-2026-0303fixed in 3.2.532Medium 4.8Sep 10Palo Alto Networks Cortex XDR Broker VM: privilege escalationCVE-2026-0304fixed in 32.0.52Low 1.1Sep 10Palo Alto Networks Checkov by Prisma Cloud: command injectionCVE-2026-0302fixed in 3.2.502High 7.2Sep 10Palo Alto Networks Cloud NGFW: buffer overflowCVE-2026-0310fixed in 12.2.3 +4Medium 5.8Sep 10Palo Alto Networks Prisma: local user could bypass configured DLP policy...CVE-2026-0306fixed in 26.2Medium 5.9Sep 10Palo Alto Networks GlobalProtect App: privilege escalationCVE-2026-0307fixed in 6.3.3-h15 +2Low 1.1Sep 10Palo Alto Networks PAN-OS: cross-site scriptingCVE-2026-0308fixed in 12.1.10 +2Medium 4.0Sep 10Palo Alto Networks PAN-OS: command injectionCVE-2026-0309fixed in 12.2.3 +3Medium 4.3Sep 10Palo Alto Networks Prisma Access Agent: information disclosureCVE-2026-0305fixed in 26.2Low 1.7Aug 13Palo Alto Networks Cloud NGFW: information disclosureCVE-2026-0301fixed in 11.1.16-h1 +2Medium 5.2Aug 13Palo Alto Networks GlobalProtect App: buffer overflowCVE-2026-0297fixed in 6.3.3-h15 +4Medium 5.2Aug 13Palo Alto Networks GlobalProtect App: improper input validationCVE-2026-0298fixed in 6.3.3-h14 +2Medium 5.9Aug 13Palo Alto Networks GlobalProtect App: privilege escalationCVE-2026-0299fixed in 6.3.3-h15 +3Medium 5.6Aug 13Palo Alto Networks Prisma: local attacker could bypass the anti-tamper...CVE-2026-0293fixed in 26.3Medium 6.0Aug 13Palo Alto Networks Prisma Access Agent: privilege escalationCVE-2026-0294fixed in 26.3Medium 4.1Aug 13Palo Alto Networks GlobalProtect App: race conditionCVE-2026-0295fixed in 6.3.3-h14 (6.3.3-1121) +2Medium 4.5Aug 13Palo Alto Networks GlobalProtect App: improper certificate validationCVE-2026-0296fixed in 6.3.3-h15 +3Low 0.5Aug 13Palo Alto Networks Prisma Browser: weakly protected credentialsCVE-2026-0289fixed in 150.49.4.125Low 0.5Aug 13Palo Alto Networks Prisma Browser: information disclosureCVE-2026-0290fixed in 148.18.4.217Low 1.1Aug 13Palo Alto Networks Prisma Access Agent: link followingCVE-2026-0291fixed in 26.2.2Low 2.1Aug 13Palo Alto Networks Prisma Access Agent: authentication bypassCVE-2026-0292fixed in 26.3Low 2.0Jul 9Palo Alto Networks Prisma Browser: privilege escalationCVE-2026-0275fixed in 150.33.2.46Low 1.1Jul 9Palo Alto Networks Cortex XDR Broker VM: privilege escalationCVE-2026-0276fixed in 31.0.58Medium 5.7Jul 9Palo Alto Networks Prisma Access Agent: improper certificate validationCVE-2026-0277fixed in 26.2.1Medium 5.8Jul 9Palo Alto Networks Prisma: local user could bypass DLP policy enforcement...CVE-2026-0278fixed in 26.2.1Medium 6.0Jul 9Palo Alto Networks PAN-OS: command injectionCVE-2026-0286fixed in 12.1.8 +3Medium 6.6Jul 9Palo Alto Networks Cloud NGFW: denial of serviceCVE-2026-0287fixed in 12.1.4-h8 +5Medium 4.7Jul 9Palo Alto Networks PAN-OS: information disclosureCVE-2026-0284fixed in 12.1.4-h8 +3Medium 4.7Jul 9Palo Alto Networks PAN-OS: server-side request forgeryCVE-2026-0285fixed in 12.1.8 +3Low 2.7Jul 9Palo Alto Networks PAN-OS: unauthenticated attacker could the management web...CVE-2026-0282fixed in 12.1.8 +3Medium 4.5Jul 9Palo Alto Networks PAN-OS: authentication bypassCVE-2026-0283fixed in 12.1.8 +3Low 1.7Jul 9Palo Alto Networks PAN-OS: unauthenticated attacker could bypass firewall...CVE-2026-0280fixed in 12.1.8 +5Low 2.1Jul 9Palo Alto Networks PAN-OS: information disclosureCVE-2026-0281fixed in 12.1.8 +3Low 1.3Jul 9Palo Alto Networks PAN-OS: cross-site scriptingCVE-2026-0279fixed in 12.1.8 +3High 7.2Jul 8Palo Alto Networks PAN-OS: buffer overflowCVE-2026-0288fixed in 12.1.8 +5
About Palo Alto Networks

Security advisories Palo Alto Networks publishes for its own products.

securityadvisories.paloaltonetworks.comPalo Alto Networks

Palo Alto Networks elsewhere on Ibis: Acquisitions · Quarterly · Paydays · TechConf