Skip to content
OpenAdvisories
Medium WID-SEC-2026-4526 7 CVEs

Palo Alto Networks PAN-OS: Mehrere Schwachstellen

Published Nov 11, 2026 · Updated Nov 11, 2026 · de

Vendor: Palo Alto Networks Product: PAN-OS

Summary

Ein Angreifer kann mehrere Schwachstellen in Palo Alto Networks PAN-OS ausnutzen, um Informationen offenzulegen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, um Sicherheitsvorkehrungen zu umgehen und um beliebigen Programmcode mit Administratorrechten auszuführen.

Product

PAN-OS ist das Betriebssystem der Sicherheitssysteme / Firewalls der Firma Palo Alto Networks.

Vulnerabilities 7

  • Medium 5.7
    CVE-2026-0330

    PAN-OS: Authenticated Remote Code Execution (RCE) in Panorama

    A remote code execution (RCE) vulnerability in Palo Alto Networks PAN-OS® software on Panorama enables an authenticated administrator with network access to execute arbitrary code with root privileges. The security risk posed by this issue is significantly mi…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 4.6
    CVE-2026-0329

    PAN-OS: Buffer Overflow Vulnerability

    A buffer overflow vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Cloud…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 4.6
    CVE-2026-0331

    PAN-OS: Sensitive Information Disclosure Vulnerability

    An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remote attacker with network access to obtain sensitive firewall and session information by sending traffic to or through a dataplane interface. Panorama…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Low 2.7
    CVE-2026-0328

    PAN-OS: User Impersonation through GlobalProtect Portal

    Authentication bypass vulnerabilities in the GlobalProtect™ portal and gateway of Palo Alto Networks PAN-OS® software enables an unauthenticated user to bypass security restrictions and establish an unauthorized VPN connection. Panorama, Cloud NGFW, and Prism…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Low 2.3
    CVE-2026-0327

    PAN-OS: Privilege Escalation Vulnerability in GlobalProtect

    A privilege escalation vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated, lower-privileged user to obtain the privileges and configuration of a higher-privileged user. Cloud NGFW and Panorama are not af…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Low 1.7
    CVE-2026-0326

    PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing

    A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption. Panorama and Prisma® Access are not affected by this vulnerability.

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Low 1.3
    CVE-2026-0325

    PAN-OS: GlobalProtect Authorization Bypass Vulnerability

    An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Revision history

  1. #1

    Initiale Fassung

References