Palo Alto Networks
Palo Alto Networks Security Releases - July 2026
palo-alto-networks-2026-07 Jul 1, 2026 Source: Vendor
Palo Alto Networks security advisories for July 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-0279
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
11 lines
Showing 1–11 of 11
CVE-2026-0279
BR2026-0000-032105
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN...
Credited as our internal security research teams
CVE-2026-0280
BR2026-0000-032106
Cloud NGFW, PAN-OS, Panorama
unclaimed
An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network ...
Credited as Curious of TRAPA Security
CVE-2026-0281
BR2026-0000-032107
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to obtain web session tokens. ...
Credited as our internal security research teams
CVE-2026-0282
BR2026-0000-032108
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to delete files from a temporary directo...
Credited as our internal security research teams
CVE-2026-0283
BR2026-0000-032109
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security restrictions and est...
Credited as Vaibhav Nagar (internal reporter) and our internal security research teams
CVE-2026-0284
BR2026-0000-032110
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to inject malicious XML co...
Credited as our internal security research teams
CVE-2026-0285
BR2026-0000-032111
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthori...
Credited as our internal security research teams
CVE-2026-0286
BR2026-0000-032112
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root.
The security ris...
Credited as Curious of TRAPA Security
CVE-2026-0286
BR2026-0000-032113
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root.
The security ris...
Credited as our internal security research teams
CVE-2026-0287
BR2026-0000-032114
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending speci...
Credited as our internal security research teams
CVE-2026-0288
BR2026-0000-032115
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component of Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network access to cause a ...
Credited as Liang Zhu