DeutschShown in its original language — a full translation is planned for a future version.
Palo Alto Networks PAN-OS: Mehrere Schwachstellen
view advisory published 2026-05-14
Ein Angreifer kann mehrere Schwachstellen in Palo Alto Networks PAN-OS ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-0262US | high7.5 | — | ||
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition… | ||||
| CVE-2026-0261US | high7.2 | — | ||
Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary commands as… | ||||
| CVE-2026-0258US | critical9.1 | — | ||
A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to se… | ||||
| CVE-2026-0257US | critical9.1OT critical | KEV | ||
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establi… | ||||
| CVE-2026-0256US | medium4.8 | — | ||
A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web… | ||||
| CVE-2026-0265US | high8.1 | Exploit | ||
An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud A… | ||||
| CVE-2026-0264US | critical9.8 | — | ||
A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a de… | ||||
| CVE-2026-0263US | critical9.8 | — | ||
A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary code with eleva… | ||||
02
references
External citations — patches, advisories, analysis.
- EUVD Security Advisory vom 2026-05-13external
- EUVD Security Advisory vom 2026-05-13external
- EUVD Security Advisory vom 2026-05-13external
- Palo Alto Networks Security Advisory vom 2026-05-13external
- Palo Alto Networks Security Advisory vom 2026-05-13external
- Palo Alto Networks Security Advisory vom 2026-05-13external
- Palo Alto Networks Security Advisory vom 2026-05-13external
- Palo Alto Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan