Skip to content
OpenAdvisories
High 1 exploited CVE WID-SEC-2026-3947 7 CVEs

Palo Alto Networks PAN-OS: Mehrere Schwachstellen

Published Oct 14, 2026 · Updated Oct 14, 2026 · de-DE

Vendor: Palo Alto Networks Product: PAN-OS

Summary

Ein Angreifer kann mehrere Schwachstellen in Palo Alto Networks PAN-OS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code mit Root-Rechten auszuführen, Sicherheitsmaßnahmen zu umgehen, sich als andere Benutzer auszugeben oder einen Denial-of-Service-Zustand auszulösen.

Product

PAN-OS ist das Betriebssystem der Sicherheitssysteme / Firewalls der Firma Palo Alto Networks.

Vulnerabilities 7

  • High 8.5
    CVE-2026-0322 Exploited Public exploit

    PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface

    A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by thi…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
    KEV Oct 14, 2026
  • Medium 6.6
    CVE-2026-0321

    PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services

    Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repea…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 5.7
    CVE-2026-0320

    PAN-OS: Authenticated Admin Command Injection Vulnerability

    A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS …

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 4.9
    CVE-2026-0319

    PAN-OS: Improper Input Handling Vulnerability

    An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by thi…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 4.6
    CVE-2026-0318

    PAN-OS: Denial of Service (DoS) on Panorama

    A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Pano…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Low 1.2
    CVE-2026-0317

    PAN-OS: Denial of Service Vulnerability

    A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service (DoS) condition by sending a specially crafted API request. The security risk posed by this …

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Low 0.4
    CVE-2026-0316

    PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability

    A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. The security risk posed by this issue is minimized when …

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Revision history

  1. #1

    Initiale Fassung

References