The vulnerability identified as CVE-2026-0308 is a stored cross-site scripting (XSS) flaw in Palo Alto Networks PAN-OS software. It enables a malicious authenticated administrator to inject and execute JavaScript code through the web interface. This issue affects PAN-OS running on PA-Series and VM-Series firewalls and Panorama virtual and M-Series appliances. Cloud NGFW and Prisma Access services are not affected. The vulnerability has a low severity rating and no known active exploitation has been reported. No patch or official remediation details are available at this time.

An authenticated administrator with malicious intent can exploit this vulnerability to store and execute arbitrary JavaScript code in the web interface context. This could potentially lead to session hijacking, unauthorized actions within the management interface, or other client-side impacts. However, the overall severity is low, and no known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until official fixes or mitigations are published by Palo Alto Networks, restrict administrative access to trusted personnel only and monitor for suspicious activity. No vendor advisory or patch information is currently available to confirm remediation.