Palo Alto Networks PSIRT

CVE-2026-0264 PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution

CVE-2026-0256 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface

CVE-2026-0262 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing

CVE-2026-0258 PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching

CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled

CVE-2026-0259 WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)

CVE-2026-0261 PAN-OS: Authenticated Admin Command Injection Vulnerability

CVE-2026-0257 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

CVE-2026-0251 GlobalProtect App: Local Privilege Escalation Vulnerabilities

CVE-2026-0300 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal

CVE-2026-0240 Trust Protection Foundation: Sensitive Information Disclosure Vulnerability

CVE-2026-0249 GlobalProtect App: Certificate Validation Bypass Vulnerabilities

CVE-2026-0263 PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing

CVE-2026-0238 Broker VM: Improper Input Validation in Broker VM Certificate and Key Fields

PAN-SA-2026-0007 Chromium and Prisma Browser: Monthly Vulnerability Update (May 2026)

CVE-2026-0245 Prisma Access Agent: Information Disclosure Vulnerabilities

CVE-2026-0239 Chronosphere Chronocollector Information Disclosure Vulnerability

CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway

CVE-2026-0244 Prisma SD-WAN: Improper Certificate Validation Vulnerability

CVE-2026-0248 Prisma Access Agent: Improper Certificate Validation Vulnerability

CVE-2026-0246 Prisma Access Agent: Local Privilege Escalation Vulnerability

CVE-2026-0243 Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet

CVE-2026-0242 Trust Protection Foundation: SQL Injection Vulnerability

CVE-2026-0247 Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities

CVE-2026-0241 Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities