Palo Alto Networks
Palo Alto Networks Security Releases - June 2026
palo-alto-networks-2026-06 Jun 1, 2026 Source: Vendor
Palo Alto Networks security advisories for June 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-0266
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
3 lines
Showing 1–3 of 3
CVE-2026-0266
BR2026-0000-032102
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface.
This issue...
Credited as Palo Alto Networks thanks Rajnish Gupta (internal reporter), James Otten (internal reporter), and Jasper Westerman of REQON B.V. for discovering and reporting this issue
CVE-2026-0272
BR2026-0000-032103
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform actions on the device wi...
Credited as Palo Alto Networks thanks an external reporter, Frigo, for discovering and reporting this issue
CVE-2026-0273
BR2026-0000-032104
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able t...
Credited as Visa Inc. (external reporter), Rotem Bar (internal reporter), and Deep Product Security Research Team (internal reporter)