Skip to content
VulniPulse
Highest advisory severityHigh 1 vendor · 1 advisory

CVE-2026-0259

CVE-2026-0259: 1 tracked advisory record across Palo Alto. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

Vendor advisory comparison

Palo Alto

1 advisory
  • Advisory severityHigh7.1

    High [CVE-2026-0259] WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)

    CVE-2026-0259Source published

    CVE-2026-0259 WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)

    Related products — impact not confirmed
    • WildFire
    Source-reported affected versions
    • WildFire WF-500 and WF-500-B < 12.1.7
    • WildFire WF-500 and WF-500-B < 11.2.12
    • WildFire WF-500 and WF-500-B < 11.1.15
    • WildFire WF-500 and WF-500-B < 10.2.7-h34
    Source-reported fixed versions
    • WildFire WF-500 and WF-500-B >= 12.1.7
    • WildFire WF-500 and WF-500-B >= 12.1.4-h5
    • WildFire WF-500 and WF-500-B >= 11.2.12
    • WildFire WF-500 and WF-500-B >= 11.2.10-h6

    13 more entries in the full advisory.

    Mitigation guidance
    • Upgrade to a supported version.
    Workarounds
    • For airgapped deployments, we strongly recommend that you secure WildFire 500 appliances by restricting access to only trusted internal IP addresses.
    • Customers with a Threat Prevention subscription can block attacks for this vulnerability by enabling Threat ID 510010 (from Applications and Threats content version 9100-10044 and later).
    • Please note that this Threat ID requires SSL Decryption.

Android app · Google Play

Monitor future Palo Alto CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery