An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.
CVE-2026-0311 is a server-side request forgery (SSRF) vulnerability in Palo Alto Networks Checkov by Prisma Cloud. It allows a local unauthenticated user to make unauthorized network requests from the host to internal services. The vulnerability affects versions from 0 up to but not including 3.2.533. The CVSS 4.0 base score is 1.1, indicating low severity. There are no known exploits in the wild and no vendor-provided patch information is available at this time.
CVE-2026-0312 is a path traversal vulnerability in Palo Alto Networks Checkov by Prisma Cloud that allows an unauthenticated local user to write files to arbitrary locations on the scanning filesystem. This vulnerability affects versions from 0 up to but not including 3.3.25. The CVSS 4.0 base score is 4.3, indicating a medium severity issue. There is no indication of known exploits in the wild. The vulnerability requires local access and user interaction, with limited impact on confidentiality and availability.
CVE-2026-0313 is a command injection vulnerability in Palo Alto Networks Cortex XSOAR OS Query content pack. It allows an authenticated administrator to execute arbitrary operating system commands on remote endpoints. The vulnerability affects versions from 0 up to but not including 1.0.17. The CVSS 4.0 base score is 6.1, indicating a medium severity. There are no known exploits in the wild and no patch information is provided in the input data.
CVE-2026-0314 is a type confusion vulnerability in the Palo Alto Networks GlobalProtect app on Windows. It allows a local user with low privileges to cause a denial of service (DoS) condition. Other platforms such as Linux, macOS, iOS, Android, and Chrome OS are not affected. The vulnerability has a medium severity rating with a CVSS score of 4.3.
CVE-2026-0315 is a local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app for macOS. It allows a local non-administrative user to escalate privileges to root by exploiting an untrusted search path issue. Other platforms such as Linux, Windows, iOS, Android, and Chrome OS are not affected. The vulnerability has a medium severity rating with a CVSS score of 5.9.
CVE-2026-0316 is a stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software affecting PA-Series, VM-Series firewalls, and Panorama (virtual and M-Series). It allows a malicious authenticated administrator to store or execute JavaScript payloads via the web interface. The vulnerability does not affect Cloud NGFW or Prisma Access. The risk is reduced if management interfaces are restricted to trusted internal IPs. The CVSS score is low (1.1).
CVE-2026-0317 is a low-severity denial of service (DoS) vulnerability in Palo Alto Networks PAN-OS software affecting certain versions. An authenticated user with a read-only administrator role can cause a DoS by sending a specially crafted API request. The risk is mitigated by restricting management web interface access to trusted internal IP addresses. Cloud NGFW, Panorama, and Prisma Access are not affected by this issue.
CVE-2026-0318 is a medium severity stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS software on Panorama. Exploitation can cause a denial of service (DoS) condition, with repeated attempts forcing Panorama into maintenance mode. Cloud NGFW, Prisma Access, and standalone PAN-OS firewalls are not affected by this issue.
CVE-2026-0319 is an input handling vulnerability in the GlobalProtect gateway component of Palo Alto Networks PAN-OS software. It allows an authenticated user to establish a GlobalProtect session impersonating another user. This issue affects specific versions of PAN-OS but does not impact the Cloud NGFW or Panorama products. The vulnerability has a medium severity rating with a CVSS score of 4.9.
CVE-2026-0320 is a command injection vulnerability in Palo Alto Networks PAN-OS software affecting PA-Series and VM-Series firewalls and Panorama devices. An authenticated administrator with access to the management interface can execute arbitrary commands as root. The vulnerability does not affect Cloud NGFW or Prisma Access. Restricting management interface access to trusted internal IP addresses significantly reduces risk. The CVSS 4.0 score is 6.1 (medium severity).
CVE-2026-0321 is a medium severity denial of service vulnerability in Palo Alto Networks PAN-OS software affecting certain versions. An unauthenticated attacker with network access can send specially crafted traffic to cause the firewall to enter maintenance mode, disrupting service. Cloud NGFW and Panorama products are not affected by this issue.
CVE-2026-0322 is a high-severity remote code execution vulnerability in the management interface of Palo Alto Networks PAN-OS software. It allows an authenticated attacker with network access to execute arbitrary code with root privileges on affected firewalls. The vulnerability affects PA-Series and VM-Series firewalls and Panorama (virtual and M-Series), but not Cloud NGFW or Prisma Access. Access to the management interface should be restricted to trusted internal IPs to minimize risk. Multiple PAN-OS versions prior to specific fixed releases are affected.
CVE-2026-0307 is a local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app for Windows, macOS, and Linux. It allows a local non-administrative user to escalate privileges to SYSTEM on Windows or root on macOS and Linux by exploiting an untrusted search path issue. The vulnerability does not affect the GlobalProtect app on iOS, Android, or ChromeOS. The CVSS 4.0 score is 5.9, indicating medium severity.
An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.
The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.