| 2.3 | CVE-2026-0327
PAN-OS: Privilege Escalation Vulnerability in GlobalProtect | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 Prisma Access 12.1 Prisma Access 11.2 | None < 12.2.4-h2 < 12.1.10-h4 < 11.2.16-h2 < 11.1.16-h5 < 12.1.10-h4* All* | All >= 12.2.4-h2 >= 12.1.10-h4 >= 11.2.16-h2 >= 11.1.16-h5 >= 12.1.10-h4* None* | 2026-11-11 | 2026-11-11 |
| 1.7 | CVE-2026-0326
PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 Prisma Access | All* < 12.2.4-h2 < 12.1.10-h4 < 11.2.16-h2 < 11.1.16-h5 None | None* >= 12.2.4-h2 >= 12.1.10-h4 >= 11.2.16-h2 >= 11.1.16-h5 All | 2026-11-11 | 2026-11-11 |
| 1.3 | CVE-2026-0325
PAN-OS: GlobalProtect Authorization Bypass Vulnerability | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 Prisma Access 12.1 Prisma Access 11.2 | None < 12.2.4-h2 < 12.1.10-h4 < 11.2.16-h2 < 11.1.16-h5 < 12.1.10-h4* All* | All >= 12.2.4-h2 >= 12.1.10-h4 >= 11.2.16-h2 >= 11.1.16-h5 >= 12.1.10-h4* None* | 2026-11-11 | 2026-11-11 |
| 1.2 | CVE-2026-0317
PAN-OS: Denial of Service Vulnerability | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 Prisma Access | None < 12.2.4 < 12.1.10-h2 < 11.2.16 < 11.1.16-h3 None | All >= 12.2.4 >= 12.1.10-h2 >= 11.2.16 >= 11.1.16-h3 All | 2026-10-14 | 2026-10-15 |
| 1.1 | CVE-2026-0316
PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 Prisma Access | None < 12.2.4 < 12.1.10-h2 < 11.2.16 < 11.1.16-h3 None | All >= 12.2.4 >= 12.1.10-h2 >= 11.2.16 >= 11.1.16-h3 All | 2026-10-14 | 2026-10-15 |
| 1.1 | CVE-2026-0308
PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 Prisma Access | None None < 12.1.10 < 11.2.13-h2 < 11.1.16-h2 None | All All >= 12.1.10 >= 11.2.13-h2 >= 11.1.16-h2 All | 2026-09-09 | 2026-09-09 |
| 1.7 | CVE-2026-0301
PAN-OS: Information Disclosure Vulnerability in URL Filtering | Cloud NGFW PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 10.2 Prisma Access 12.1 Prisma Access 11.2 Prisma Access 10.2 | All on AWS*, All on Azure* None None None < 11.1.16-h1 < 10.2.8 None None < 10.2.10 | None on AWS*, None on Azure* All All All >= 11.1.16-h1 >= 10.2.8 All All >= 10.2.10 | 2026-08-12 | 2026-08-12 |
| 2.7 | CVE-2026-0282
PAN-OS: File Deletion Vulnerability in Management Web Interface | Cloud NGFW PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 10.2 Prisma Access | None < 12.1.8 < 11.2.13 < 11.1.16 All None | All >= 12.1.8 >= 11.2.13 >= 11.1.16 None All | 2026-07-08 | 2026-07-08 |
| 2.1 | CVE-2026-0281
PAN-OS: Information Disclosure Vulnerability in Management Web Interface | Cloud NGFW PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 10.2 Prisma Access | None < 12.1.8 < 11.2.13 < 11.1.16 All None | All >= 12.1.8 >= 11.2.13 >= 11.1.16 None All | 2026-07-08 | 2026-07-08 |
| 1.3 | CVE-2026-0279
PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities | Cloud NGFW PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 10.2 Prisma Access 12.1 Prisma Access 11.2 Prisma Access 10.2 | None < 12.1.8 < 11.2.13 < 11.1.16 All < 12.1.8* All* All* | All >= 12.1.8 >= 11.2.13 >= 11.1.16 None >= 12.1.8* None* None* | 2026-07-08 | 2026-07-08 |
| 1.1 | CVE-2026-0266
PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface | Cloud NGFW PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 10.2 Prisma Access | None < 12.1.5 < 11.2.11 < 11.1.14 All None | All >= 12.1.5 >= 11.2.11 >= 11.1.14 None All | 2026-06-10 | 2026-06-10 |
| i | PAN-SA-2025-0005
GlobalProtect Clientless VPN: Clientless VPN Misconfiguration Allows Cross-Site Attacks | Cloud NGFW PAN-OS Prisma Access | | | 2025-02-12 | 2025-02-12 |