Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: Palo Alto Networks PAN-OS 10.2.18-h8, 11.1.16 and 2 more versions Clear all filters
TI-2026-00218 CVE-2026-0279 · GHSA-6cj9-cg4w-4m7x

PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities

Priority LOW 9

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a…

CVSS 4.0LOW 1.3 Network No auth User interaction EPSS 0.0075 Published 2026-07-09 Fixed in All, 12.1.8 +3 CWE-79
TI-2026-00219 CVE-2026-0280 · GHSA-g5c5-368c-hr8j

PAN-OS: IPv6 Firewall Policy Bypass

Priority LOW 10

An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network traffic that should be…

CVSS 4.0LOW 1.7 Network No auth No interaction EPSS 0.00337 Published 2026-07-09 Fixed in All, 12.1.8 +5 CWE-131
TI-2026-00220 CVE-2026-0281 · GHSA-ww6g-3h8v-p3mx

PAN-OS: Information Disclosure Vulnerability in Management Web Interface

Priority LOW 11

An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to obtain web session tokens.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00284 Published 2026-07-09 Fixed in All, 12.1.8 +3 CWE-524
TI-2026-00221 CVE-2026-0282 · GHSA-p684-mjp8-8m27

PAN-OS: File Deletion Vulnerability in Management Web Interface

Priority LOW 13

A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to delete files from a temporary directory.

CVSS 4.0LOW 2.7 Network No auth No interaction EPSS 0.00293 Published 2026-07-09 Fixed in All, 12.1.8 +3 CWE-20
TI-2026-00222 CVE-2026-0283 · GHSA-jmqp-7m5h-wrr8

PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)

Priority LOW 27

An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security restrictions and establish an unauthorized…

CVSS 4.0MEDIUM 4.5 Network No auth No interaction EPSS 0.00376 Published 2026-07-09 Fixed in All, 12.1.8 +3 CWE-306
TI-2026-00224 CVE-2026-0285 · GHSA-3vmp-6pgh-4q54

PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface

Priority LOW 22

A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the f…

CVSS 4.0MEDIUM 4.7 Network High privileges No interaction EPSS 0.00432 Published 2026-07-09 Fixed in All, 12.1.8 +3 CWE-918
TI-2026-00225 CVE-2026-0286 · GHSA-fhqp-fjgf-qf28

PAN-OS: Authenticated Command Injection in CLI

Priority LOW 32

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root.

CVSS 4.0MEDIUM 6.0 Network High privileges No interaction EPSS 0.01673 Published 2026-07-09 Fixed in All, 12.1.8 +3 CWE-78