Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Palo Alto Networks PAN-OS 10.2.7-h36, 11.1.4-h35 and 2 more versions Clear all filters
TI-2026-00223 CVE-2026-0284 · GHSA-9whw-75p3-6rp9

PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)

Priority LOW 28

An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to inject malicious XML content, potentially lead…

CVSS 4.0MEDIUM 4.7 Network No auth No interaction EPSS 0.00465 Published 2026-07-09 Fixed in All, 12.1.4-h8 +3 CWE-74
TI-2026-00226 CVE-2026-0287 · GHSA-8r6w-7h78-4w2j

PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing

Priority LOW 30

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network tr…

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00621 Published 2026-07-09 Fixed in 12.1.4-h8, 11.2.4-h20 +4 CWE-754