Palo Alto Networks Security Advisories https://security.paloaltonetworks.com/rss.xmlCVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities (Severity: LOW)2026-07-08T20:30:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0279https://security.paloaltonetworks.com/CVE-2026-0279CVE-2026-0284 PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN) (Severity: MEDIUM)2026-07-08T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0284https://security.paloaltonetworks.com/CVE-2026-0284CVE-2026-0282 PAN-OS: File Deletion Vulnerability in Management Web Interface (Severity: LOW)2026-07-08T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0282https://security.paloaltonetworks.com/CVE-2026-0282CVE-2026-0283 PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) (Severity: MEDIUM)2026-07-08T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0283https://security.paloaltonetworks.com/CVE-2026-0283CVE-2026-0281 PAN-OS: Information Disclosure Vulnerability in Management Web Interface (Severity: LOW)2026-07-08T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0281https://security.paloaltonetworks.com/CVE-2026-0281CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent (Severity: HIGH)2026-07-08T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0288https://security.paloaltonetworks.com/CVE-2026-0288CVE-2026-0277 Prisma Access Agent: Improper Certificate Validation on iOS (Severity: MEDIUM)2026-07-08T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0277https://security.paloaltonetworks.com/CVE-2026-0277CVE-2026-0280 PAN-OS: IPv6 Firewall Policy Bypass (Severity: LOW)2026-07-08T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0280https://security.paloaltonetworks.com/CVE-2026-0280CVE-2026-0286 PAN-OS: Authenticated Command Injection in CLI (Severity: MEDIUM)2026-07-08T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0286https://security.paloaltonetworks.com/CVE-2026-0286CVE-2026-0287 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing (Severity: MEDIUM)2026-07-08T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0287https://security.paloaltonetworks.com/CVE-2026-0287CVE-2026-0285 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface (Severity: MEDIUM)2026-07-08T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0285https://security.paloaltonetworks.com/CVE-2026-0285CVE-2026-0276 Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability (Severity: LOW)2026-07-08T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0276https://security.paloaltonetworks.com/CVE-2026-0276PAN-SA-2026-0010 Chromium and Prisma Browser: Monthly Vulnerability Update (July 2026) (Severity: HIGH)2026-07-08T16:00:00.000Zhttps://security.paloaltonetworks.com/PAN-SA-2026-0010https://security.paloaltonetworks.com/PAN-SA-2026-0010CVE-2026-0249 GlobalProtect App: Certificate Validation Bypass Vulnerabilities (Severity: MEDIUM)2026-06-13T01:45:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0249https://security.paloaltonetworks.com/CVE-2026-0249CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM)2026-06-13T01:30:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0250https://security.paloaltonetworks.com/CVE-2026-0250CVE-2026-0273 PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI (Severity: MEDIUM)2026-06-11T01:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0273https://security.paloaltonetworks.com/CVE-2026-0273CVE-2026-0272 PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI) (Severity: MEDIUM)2026-06-10T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0272https://security.paloaltonetworks.com/CVE-2026-0272CVE-2026-0270 Cortex XSOAR: Path Traversal Vulnerability (Severity: MEDIUM)2026-06-10T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0270https://security.paloaltonetworks.com/CVE-2026-0270CVE-2026-0271 Prisma Access Agent: Local Privilege Escalation by Authorized Users (Severity: MEDIUM)2026-06-10T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0271https://security.paloaltonetworks.com/CVE-2026-0271CVE-2026-0268 Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux (Severity: MEDIUM)2026-06-10T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0268https://security.paloaltonetworks.com/CVE-2026-0268CVE-2026-0269 PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing (Severity: MEDIUM)2026-06-10T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0269https://security.paloaltonetworks.com/CVE-2026-0269CVE-2026-0274 Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration (Severity: HIGH)2026-06-10T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0274https://security.paloaltonetworks.com/CVE-2026-0274CVE-2026-0266 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: LOW)2026-06-10T16:00:00.000Zhttps://security.paloaltonetworks.com/CVE-2026-0266https://security.paloaltonetworks.com/CVE-2026-0266PAN-SA-2026-0008 Chromium: Monthly Vulnerability Update (June 2026) (Severity: HIGH)2026-06-10T16:00:00.000Zhttps://security.paloaltonetworks.com/PAN-SA-2026-0008https://security.paloaltonetworks.com/PAN-SA-2026-0008PAN-SA-2026-0009 Informational Bulletin: Impact assessment of OSS CVEs in Prisma SD-WAN ION (Severity: INFORMATIONAL)2026-06-10T16:00:00.000Zhttps://security.paloaltonetworks.com/PAN-SA-2026-0009https://security.paloaltonetworks.com/PAN-SA-2026-0009