Skip to content
Threat Feed
Subscribe

Product

Panorama

3 briefs RSS
low threat

CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities

Palo Alto Networks has disclosed multiple low-severity cross-site scripting (XSS) vulnerabilities, CVE-2026-0279, in PAN-OS software affecting the User-ID Authentication Portal, GlobalProtect gateway/portal features, and Clientless VPN, which could allow a malicious unauthenticated user to inject and execute JavaScript in a victim's browser.

exploited PAN-OS 12.1 +8 xss vulnerability firewall network-device web-application
2t
low threat

CVE-2026-0281 PAN-OS: Information Disclosure Vulnerability in Management Web Interface

An information disclosure vulnerability (CVE-2026-0281) in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to obtain web session tokens via user interaction with a malicious link, potentially leading to unauthorized access to the management interface.

exploited PAN-OS software 12.1 +6 information-disclosure network-device firewall palo-alto-networks cve
2t
low threat

CVE-2026-0282 PAN-OS: Unauthenticated File Deletion Vulnerability

An unauthenticated attacker with network access to the management web interface of Palo Alto Networks PAN-OS software can exploit CVE-2026-0282, a file deletion vulnerability, to delete files from a temporary directory, impacting PA-Series and VM-Series firewalls, and Panorama appliances.

exploited PAN-OS 12.1 +6 vulnerability pan-os network-device file-deletion