CVE-2026-0284
CVE-2026-0284: 1 tracked advisory record across Palo Alto. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Palo Alto
1 advisory- Advisory severityHigh7.8
High [CVE-2026-0284] PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)
CVE-2026-0284Source published
An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to inject malicious XML content, potentially leading to information disclosure or corruption of internal LSVPN satellite data. Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.
- Affected products in this advisory
- PAN-OS
- Source-reported affected versions
- PAN-OS < 12.1.4-h8
- PAN-OS < 11.2.4-h20
- PAN-OS < 11.1.4-h35
- PAN-OS < 10.2.7-h36
- Source-reported fixed versions
- PAN-OS >= 12.1.4-h8
- PAN-OS >= 12.1.7-h2
- PAN-OS >= 12.1.8
- PAN-OS >= 11.2.4-h20
14 more entries in the full advisory.
- Mitigation guidance
- Upgrade to a fixed release: PAN-OS >= 12.1.4-h8; PAN-OS >= 12.1.7-h2; PAN-OS >= 12.1.8; PAN-OS >= 11.2.4-h20; ….
- Workarounds
- To ensure the Threat ID provides effective protection against this vulnerability, ensure that vulnerability protection security profile is applied to your GlobalProtect interface.
Android app · Google Play
Monitor future Palo Alto CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.