Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Palo Alto Networks PAN-OS 10.2.7-h37, 11.1.4-h36 and 3 more versions Clear all filters
TI-2026-00248 CVE-2026-0309 · GHSA-w29c-3xrj-p9j4

PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration

Priority LOW 22

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user.

CVSS 4.0MEDIUM 4.0 Local High privileges No interaction EPSS 0.00785 Published 2026-09-10 Fixed in All, 12.2.3 +4 CWE-78
TI-2026-00249 CVE-2026-0310 · GHSA-hwvp-gh82-wq29

PAN-OS: Buffer Overflow Vulnerability via XML Processing

Priority LOW 35

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a d…

CVSS 4.0HIGH 7.2 Network No auth No interaction EPSS 0.00666 Published 2026-09-10 Fixed in 12.2.3, 12.1.4-h10 +4 CWE-787