Skip to content
Threat Feed
Subscribe

Product

Prisma Access

5 briefs RSS
high threat

CVE-2026-0308 Stored XSS in PAN-OS Web Interface

A stored cross-site scripting (XSS) vulnerability in the PAN-OS web interface allows an authenticated administrator to execute arbitrary JavaScript within the context of the management interface.

PAN-OS +12 xss web-vulnerability cve rce network-security vulnerability panos
4t
low threat

Information Disclosure Vulnerability in PAN-OS URL Filtering

An information disclosure vulnerability (CVE-2026-0301) in Palo Alto Networks PAN-OS URL Filtering allows unauthenticated attackers to access sensitive memory data if custom response pages are enabled.

exploited PAN-OS +2 vulnerability information-disclosure palo-alto
1t
medium advisory

CVE-2026-0257 PAN-OS GlobalProtect Authentication Bypass Vulnerability

An authentication bypass vulnerability exists in Palo Alto Networks PAN-OS GlobalProtect portal and gateway (CVE-2026-0257) when authentication override cookies are enabled, allowing an attacker to establish an unauthorized VPN connection.

PAN-OS +1 authentication bypass vpn cve-2026-0257
1r 1t
medium advisory

CVE-2026-0262 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing

Unauthenticated attackers can cause a denial of service (DoS) condition on Palo Alto Networks PAN-OS firewalls by sending specially crafted network traffic, as described in CVE-2026-0262.

PAN-OS +1 dos denial of service CVE-2026-0262
2r 2t
high advisory

Expanding Detection Beyond Endpoints to Counter Evolving Threats

Threat actors are rapidly exfiltrating data by exploiting blind spots created by an over-reliance on endpoint data, necessitating a comprehensive security approach that incorporates cloud, identity, and network telemetry for effective threat detection and response.

Cortex XDR +8 cloud-security iam incident-response threat-detection
3r 6t