SSA-967325: Multiple Vulnerabilities in Palo Alto Networks PAN-OS before V11.2.10-h7 on RUGGEDCOM APE1808 Devices
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications. [1] https://security.paloaltonetworks.com/
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-0301US | high7.5 | — | ||
An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive… | ||||
| CVE-2026-0269US | medium5.7 | — | ||
A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using a malicio… | ||||
| CVE-2026-0262US | high7.5 | — | ||
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition… | ||||
| CVE-2026-0261US | high7.2 | — | ||
Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary commands as… | ||||
| CVE-2026-0258US | critical9.1 | — | ||
A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to se… | ||||
| CVE-2026-0257US | critical9.1OT critical | KEV | ||
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establi… | ||||
| CVE-2026-0256US | medium4.8 | — | ||
A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web… | ||||
| CVE-2026-0265US | high8.1 | Exploit | ||
An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud A… | ||||
| CVE-2026-0264US | critical9.8 | — | ||
A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a de… | ||||
| CVE-2026-0300US | critical9.8OT critical | KEV | ||
A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execu… | ||||
references
External citations — patches, advisories, analysis.
remediations (13)
- MitigationRUGGEDCOM APE1808
Disable Authentication Override options (for generating and accepting cookies) in the GlobalProtect portal and gateway configuration
- MitigationRUGGEDCOM APE1808
Disable Response Pages in the Interface Management Profile attached to every L3 interface in any zone where untrusted/internet traffic can ingress. Keep Response Pages enabled only on interfaces in trust/internal zones where legitimate users' browsers ingress
- MitigationRUGGEDCOM APE1808
Disable the DNS Proxy feature (Network > DNS Proxy) if it is not being used and configure DNS server with a RFC1918 or a public trusted IP address
- FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.2.10-h6. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.2.10-h7 or later versions. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.2.10-h7. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.2.10-h7. Contact customer support to receive patch and update information
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan