Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.
Panorama and Cloud NGFW are not impacted by these issues.
A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies.
A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service (DoS) condition.
Panorama, Cloud NGFW and Prisma® Access are not impacted by these vulnerabilities.
CVE-2026-0259 is a medium severity vulnerability in Palo Alto Networks WildFire WF-500 and WF-500-B appliances running default non-FIPS mode. It allows an attacker with low privileges to read sensitive files and delete arbitrary files on the affected appliance. This vulnerability does not affect the WildFire Public cloud service. A software update is available for on-premise WildFire appliances to address this issue.
Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI or Web UI.
The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators and by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .
This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).
Cloud NGFW and Prisma Access® are not impacted by these vulnerabilities.
A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic.
Panorama and Cloud NGFW are not impacted by these vulnerabilities.
CVE-2026-0237 is a high-severity vulnerability in Palo Alto Networks Prisma Browser on macOS. It involves improper protection of an alternate path that exposes an internal automation bridge. This flaw allows a locally authenticated non-admin user to send unauthorized commands to the browser by leveraging this exposed communication channel, effectively bypassing security controls. The vulnerability has a CVSS 4.0 score of 7.3, indicating significant impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.
CVE-2026-0263 is a buffer overflow vulnerability in the IKEv2 processing component of Palo Alto Networks PAN-OS software. This flaw allows an unauthenticated network attacker to execute arbitrary code with elevated privileges on the affected firewall or cause a denial of service. The vulnerability specifically impacts PAN-OS running on Cloud NGFW devices, while Panorama, Cloud NGFW as a service, and Prisma Access are not affected. The CVSS 4.0 base score is 7.2, indicating a high severity. No official patch or remediation guidance has been provided yet by the vendor. There are no known exploits in the wild at this time.
A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a denial of service (DoS) condition (all PAN-OS platforms except Cloud NGFW and Prisma Access) or potentially execute arbitrary code by sending specially crafted network traffic (PA-Series hardware only).
Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.
An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service (CAS) is enabled.
The risk is higher if CAS is enabled on the management interface and lower when any other login interfaces are used.
The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .
This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).
Cloud NGFW and Prisma Access® are not impacted by this vulnerability.
A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.
The risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses.
Prisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability.
CVE-2026-0232 is a vulnerability in the Palo Alto Networks Cortex XDR agent on Windows that allows a local Windows administrator to disable the agent's protection mechanism. This could enable malware to operate without detection. The vulnerability has a medium severity rating and a CVSS score of 4.0. No patch or official remediation has been confirmed yet.
CVE-2026-0233 is a certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager version 5.10.0 on Windows. It allows an unauthenticated attacker with adjacent network access to execute arbitrary code with SYSTEM privileges. The vulnerability is classified under CWE-295 (Improper Certificate Validation). The CVSS 4.0 base score is 2.0, indicating low severity. No official patch or remediation guidance is currently available. There are no known exploits in the wild at this time.
CVE-2026-0234 is a high-severity vulnerability in Palo Alto Networks Cortex XSOAR Microsoft Teams Marketplace version 1.5.0. It involves improper verification of cryptographic signatures during Microsoft Teams integration, allowing unauthenticated users to access and modify protected resources.
CVE-2026-0231 is an information disclosure vulnerability in Palo Alto Networks Cortex XDR Broker VM version 30.0.0. It allows an authenticated user with network access to the Broker VM to trigger a live terminal session via the Cortex UI and modify any configuration setting. Exploitation requires high privileges but no user interaction. The vulnerability can lead to unauthorized exposure and modification of sensitive system information, impacting confidentiality, integrity, and availability. No known exploits are currently reported in the wild. The CVSS 4.0 base score is 5.7, indicating medium severity.
CVE-2026-0230 is a medium-severity vulnerability in the Palo Alto Networks Cortex XDR agent for macOS that allows a local administrator to disable the agent due to improper handling of exceptional conditions. This flaw stems from CWE-754, indicating an improper check for unusual or exceptional conditions in the protection mechanism. Exploitation requires local administrator privileges but no user interaction, enabling malware or malicious insiders to evade detection by disabling the agent. The vulnerability affects versions 8.3-CE and 8.7-CE of the Cortex XDR agent. Although no known exploits are currently in the wild, the issue could significantly undermine endpoint security by allowing malicious activity to proceed undetected. Organizations relying on Cortex XDR for macOS should prioritize patching or mitigating this vulnerability to maintain endpoint protection integrity.
A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode.
Cloud NGFW and Prisma Access® are not impacted by this vulnerability.
An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to PAN-OS using expired certificates even if the PAN-OS configuration would not normally permit them to do so.
