Palo Alto Networks
Palo Alto Networks Security Releases - September 2026
palo-alto-networks-2026-09 Sep 1, 2026 Source: Vendor
Palo Alto Networks security advisories for September 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-0308
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
3 lines
Showing 1–3 of 3
CVE-2026-0308
BR2026-0000-032117
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web inter...
Credited as Michał Skowron and Tomasz Stachowicz of ING Hubs Poland and James Otten (internal reporter)
CVE-2026-0309
BR2026-0000-032118
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able t...
Credited as François Rigault
CVE-2026-0310
BR2026-0000-032119
Cloud NGFW, PAN-OS, Prisma Access
unclaimed
A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane...
Credited as Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue