SSA-104023: Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications. [1] https://security.paloaltonetworks.com/
describes (16)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-0310US | — | — | ||
A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management… | ||||
| CVE-2026-0309US | — | — | ||
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root u… | ||||
| CVE-2026-0308US | — | — | ||
A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload us… | ||||
| CVE-2026-0287US | high7.5 | — | ||
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition… | ||||
| CVE-2026-0286US | high7.2 | — | ||
A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root.… | ||||
| CVE-2026-0285US | medium4.9 | — | ||
A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface… | ||||
| CVE-2026-0284US | critical9.9 | — | ||
An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to inject… | ||||
| CVE-2026-0283US | high7.2OT elevated | — | ||
An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security res… | ||||
| CVE-2026-0282US | medium6.5 | — | ||
A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to delete files from a… | ||||
| CVE-2026-0281US | high7.1 | — | ||
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to obtain web… | ||||
| CVE-2026-0280US | high7.2 | — | ||
An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement,… | ||||
| CVE-2026-0279US | medium6.1 | — | ||
Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo… | ||||
| CVE-2026-0288US | high7.5 | — | ||
Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component of Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network a… | ||||
| CVE-2026-0273US | high7.2 | Exploit | ||
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root u… | ||||
| CVE-2026-0272US | high7.2OT elevated | — | ||
A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform actions… | ||||
| CVE-2026-0266US | medium4.8 | — | ||
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interf… | ||||
references
External citations — patches, advisories, analysis.
remediations (16)
- FixedRUGGEDCOM APE1808
Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Contact customer support to receive patch and update information
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan