Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Palo Alto Networks Prisma Access 12.1.7-h8 Clear all filters
TI-2026-74476 CVE-2026-0316

Stored cross-site scripting in PAN-OS web interface

Priority LOW 7

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface.

CVSS 4.0LOW 1.1 Network High privileges User interaction EPSS 0.00265 Published 2026-10-14 Fixed in All, 12.2.4 +3 CWE-79
TI-2026-74477 CVE-2026-0317

PAN-OS denial of service flaw exposed to read-only administrators

Priority LOW 7

A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service (DoS) condition by sending a specially crafted API re…

CVSS 4.0LOW 1.2 Network High privileges No interaction EPSS 0.00298 Published 2026-10-14 Fixed in All, 12.2.4 +3 CWE-754
TI-2026-74478 CVE-2026-0318

Buffer overflow in PAN-OS log processing causes Panorama DoS

Priority LOW 21

A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition.

CVSS 4.0MEDIUM 4.6 Network No auth No interaction EPSS 0.00317 Published 2026-10-14 Fixed in All, 12.2.4 +3 CWE-754
TI-2026-74480 CVE-2026-0320

Command injection in PAN-OS lets admins run commands as root

Priority LOW 31

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user.

CVSS 4.0MEDIUM 6.1 Network High privileges No interaction EPSS 0.00842 Published 2026-10-14 Fixed in All, 12.2.4 +4 CWE-78