Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Palo Alto Networks Prisma Access 12.1.4-h10 Clear all filters
TI-2026-00247 CVE-2026-0308 · GHSA-c76w-v7qc-mx3r

PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface

Priority LOW 8

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface.

CVSS 4.0LOW 1.1 Network High privileges User interaction EPSS 0.00513 Published 2026-09-10 Fixed in All, 12.2.0 +3 CWE-79
TI-2026-00248 CVE-2026-0309 · GHSA-w29c-3xrj-p9j4

PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration

Priority LOW 22

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user.

CVSS 4.0MEDIUM 4.0 Local High privileges No interaction EPSS 0.00785 Published 2026-09-10 Fixed in All, 12.2.3 +4 CWE-78