Palo Alto Networks
Palo Alto Networks Security Releases - May 2026
palo-alto-networks-2026-05 May 1, 2026 Source: Vendor
Palo Alto Networks security advisories for May 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-0256
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
7 lines
Showing 1–7 of 7
CVE-2026-0256
BR2026-0000-032095
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface.
Thi...
Credited as Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue
CVE-2026-0257
Known exploited (CISA KEV)
BR2026-0000-032096
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorize...
Credited as Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue
CVE-2026-0258
BR2026-0000-032097
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network reques...
Credited as Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue
CVE-2026-0261
BR2026-0000-032098
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To b...
Credited as Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue
CVE-2026-0262
BR2026-0000-032099
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending speci...
Credited as Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue
CVE-2026-0264
BR2026-0000-032100
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a denial of service (...
Credited as Palo Alto Networks thanks an external reporter and our internal security research teams for discovering and reporting this issue
CVE-2026-0265
BR2026-0000-032101
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Ser...
Credited as Palo Alto Networks thanks Harsh Jaiswal from Hacktron AI and our internal security research teams for discovering and reporting this issue