Skip to content
OpenAdvisories
High WID-SEC-2026-3295 3 CVEs

Palo Alto Networks PAN-OS: Mehrere Schwachstellen

Published Sep 9, 2026 · Updated Sep 10, 2026 · Revision 2 · de-DE

Vendor: Palo Alto Networks Product: PAN-OS

Summary

Ein Angreifer kann mehrere Schwachstellen in Palo Alto Networks PAN-OS ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, Code mit Root-Rechten auszuführen oder einen Denial-of-Service-Zustand auszulösen.

Product

PAN-OS ist das Betriebssystem der Sicherheitssysteme / Firewalls der Firma Palo Alto Networks.

Vulnerabilities 3

  • Medium 5.2
    CVE-2026-0310

    PAN-OS: Buffer Overflow Vulnerability via XML Processing

    A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service (DoS) condition on VM-…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 4.0
    CVE-2026-0309

    PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration

    A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS …

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Low 0.4
    CVE-2026-0308

    PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface

    A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Revision history

  1. #2

    Referenz(en) aufgenommen: PAN-SA-2026-0012

  2. #1

    Initiale Fassung

References