DeutschShown in its original language — a full translation is planned for a future version.
Palo Alto Networks PAN-OS: Mehrere Schwachstellen
view advisory published 2026-07-08
Ein Angreifer kann mehrere Schwachstellen in Palo Alto Networks PAN-OS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-0287US | high7.5 | — | ||
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition… | ||||
| CVE-2026-0286US | high7.2 | — | ||
A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root.… | ||||
| CVE-2026-0285US | medium4.9 | — | ||
A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface… | ||||
| CVE-2026-0284US | critical9.9 | — | ||
An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to inject… | ||||
| CVE-2026-0283US | high7.2OT elevated | — | ||
An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security res… | ||||
| CVE-2026-0282US | medium6.5 | — | ||
A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to delete files from a… | ||||
| CVE-2026-0281US | high7.1 | — | ||
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to obtain web… | ||||
| CVE-2026-0280US | high7.2 | — | ||
An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement,… | ||||
| CVE-2026-0279US | medium6.1 | — | ||
Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo… | ||||
| CVE-2026-0288US | high7.5 | — | ||
Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component of Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network a… | ||||
02
references
External citations — patches, advisories, analysis.
- Palo Alto Networks Security Advisory vom 2026-07-08external
- Palo Alto Networks Security Advisory vom 2026-07-08external
- Palo Alto Networks Security Advisory vom 2026-07-08external
- Palo Alto Networks Security Advisory vom 2026-07-08external
- Palo Alto Networks Security Advisory vom 2026-07-08external
- Palo Alto Networks Security Advisory vom 2026-07-08external
- Palo Alto Networks Security Advisory vom 2026-07-08external
- Palo Alto Networks Security Advisory vom 2026-07-08external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan