Skip to content
Threat Feed
Subscribe

Product

VM-Series

3 briefs RSS
high threat

CVE-2026-0308 Stored XSS in PAN-OS Web Interface

A stored cross-site scripting (XSS) vulnerability in the PAN-OS web interface allows an authenticated administrator to execute arbitrary JavaScript within the context of the management interface.

PAN-OS +12 xss web-vulnerability cve rce network-security vulnerability panos
4t
low threat

CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities

Palo Alto Networks has disclosed multiple low-severity cross-site scripting (XSS) vulnerabilities, CVE-2026-0279, in PAN-OS software affecting the User-ID Authentication Portal, GlobalProtect gateway/portal features, and Clientless VPN, which could allow a malicious unauthenticated user to inject and execute JavaScript in a victim's browser.

exploited PAN-OS 12.1 +8 xss vulnerability firewall network-device web-application
2t
low threat

CVE-2026-0282 PAN-OS: Unauthenticated File Deletion Vulnerability

An unauthenticated attacker with network access to the management web interface of Palo Alto Networks PAN-OS software can exploit CVE-2026-0282, a file deletion vulnerability, to delete files from a temporary directory, impacting PA-Series and VM-Series firewalls, and Panorama appliances.

exploited PAN-OS 12.1 +6 vulnerability pan-os network-device file-deletion