Palo Alto Networks Security Advisories https://security.paloaltonetworks.com/rss.xmlCVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: LOW)2026-09-09T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0308https://security.paloaltonetworks.com/CVE-2026-0308CVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability (Severity: MEDIUM)2026-09-09T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0304https://security.paloaltonetworks.com/CVE-2026-0304CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration (Severity: MEDIUM)2026-09-09T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0309https://security.paloaltonetworks.com/CVE-2026-0309CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)2026-09-09T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0307https://security.paloaltonetworks.com/CVE-2026-0307CVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability (Severity: LOW)2026-09-09T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0302https://security.paloaltonetworks.com/CVE-2026-0302PAN-SA-2026-0012 Chromium: Monthly Vulnerability Update (September 2026) (Severity: HIGH)2026-09-09T16:00:00.000Zhttps://security.paloaltonetworks.com/PAN-SA-2026-0012https://security.paloaltonetworks.com/PAN-SA-2026-0012CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing (Severity: HIGH)2026-09-09T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0310https://security.paloaltonetworks.com/CVE-2026-0310CVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux (Severity: MEDIUM)2026-09-09T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0305https://security.paloaltonetworks.com/CVE-2026-0305CVE-2026-0306 Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows (Severity: MEDIUM)2026-09-09T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0306https://security.paloaltonetworks.com/CVE-2026-0306CVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File (Severity: LOW)2026-09-09T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0303https://security.paloaltonetworks.com/CVE-2026-0303CVE-2026-0251 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: HIGH)2026-08-27T01:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0251https://security.paloaltonetworks.com/CVE-2026-0251CVE-2026-0292 Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows (Severity: LOW)2026-08-12T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0292https://security.paloaltonetworks.com/CVE-2026-0292CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation (Severity: MEDIUM)2026-08-12T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0294https://security.paloaltonetworks.com/CVE-2026-0294CVE-2026-0293 Prisma Access Agent: Anti-Tamper Protection Bypass on Windows (Severity: MEDIUM)2026-08-12T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0293https://security.paloaltonetworks.com/CVE-2026-0293PAN-SA-2026-0011 Chromium: Monthly Vulnerability Update (August 2026) (Severity: HIGH)2026-08-12T16:00:00.000Zhttps://security.paloaltonetworks.com/PAN-SA-2026-0011https://security.paloaltonetworks.com/PAN-SA-2026-0011CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)2026-08-12T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0295https://security.paloaltonetworks.com/CVE-2026-0295CVE-2026-0291 Prisma Access Agent: Authenticated Limited File Deletion on Linux (Severity: LOW)2026-08-12T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0291https://security.paloaltonetworks.com/CVE-2026-0291CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering (Severity: LOW)2026-08-12T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0301https://security.paloaltonetworks.com/CVE-2026-0301CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)2026-08-12T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0296https://security.paloaltonetworks.com/CVE-2026-0296CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM)2026-08-12T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0298https://security.paloaltonetworks.com/CVE-2026-0298CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)2026-08-12T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0299https://security.paloaltonetworks.com/CVE-2026-0299CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)2026-08-12T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0297https://security.paloaltonetworks.com/CVE-2026-0297CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities (Severity: LOW)2026-07-08T20:30:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0279https://security.paloaltonetworks.com/CVE-2026-0279CVE-2026-0280 PAN-OS: IPv6 Firewall Policy Bypass (Severity: LOW)2026-07-08T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0280https://security.paloaltonetworks.com/CVE-2026-0280CVE-2026-0281 PAN-OS: Information Disclosure Vulnerability in Management Web Interface (Severity: LOW)2026-07-08T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0281https://security.paloaltonetworks.com/CVE-2026-0281