Palo Alto Networks Security Advisories & CVEs
85 advisories tracked · Palo Alto Networks Security Advisories · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Palo Alto CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Check if your Palo Alto device is affected
Pick your product and enter the exact software release it runs. We match it against the affected/fixed versions in Palo Alto's recent advisories.
Official source
Palo Alto Networks Security Advisories
Polled via the official security.paloaltonetworks.com RSS feed. Advisory pages are fetched for new items to extract affected/fixed version tables.
Latest Palo Alto advisories
High [CVE-2026-0295] GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
High [CVE-2026-0294] Prisma Access Agent: Local Privilege Escalation
CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation
High [CVE-2026-0296] GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
High [CVE-2026-0297] GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
High [CVE-2026-0293] Prisma Access Agent: Anti-Tamper Protection Bypass on Windows
CVE-2026-0293 Prisma Access Agent: Anti-Tamper Protection Bypass on Windows
High [CVE-2026-0289 +448] PAN-SA-2026-0011 Chromium: Monthly Vulnerability Update (August 2026)
PAN-SA-2026-0011 Chromium: Monthly Vulnerability Update (August 2026)
High [CVE-2026-0299] GlobalProtect App: Local Privilege Escalation Vulnerabilities
CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities
High [CVE-2026-0298] GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)
CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)
Medium [CVE-2026-0292] Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows
CVE-2026-0292 Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows
Medium [CVE-2026-0291] Prisma Access Agent: Authenticated Limited File Deletion on Linux
CVE-2026-0291 Prisma Access Agent: Authenticated Limited File Deletion on Linux
Medium [CVE-2026-0301] PAN-OS: Information Disclosure Vulnerability in URL Filtering
CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering Affected products named by the advisory: Cloud NGFW; Prisma Access.
Low [CVE-2026-0290] Prisma Browser: Sensitive Information Disclosure Vulnerability
Palo Alto Networks incorporated the following Chromium security fixes into our products: CVESummaryCVE-2026-13774 Use after free in ExtensionsCVE-2026-13775 Use after free in GPUCVE-2026-13776 Type Confusion in DawnCVE-2026-13777 Insufficient validation of untrusted input in iOSWebCVE-2026-13778 Use after free in WebUSBCVE-2026-13779 Use after free in ChromotingCVE-2026-13780 Insufficient validation of untrusted input in ANGLECVE-2026-13781 Insufficient validation of untrusted input in SkiaCVE-2026-13782 Use after free in BrowserCVE-2026-13783 Use after free in ViewsCVE-2026-13784 Use after free in ViewsCVE-2026-13785 Use after free in BluetoothCVE-2026-13786 Use af
Critical [CVE-2026-0288] PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent
CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent Affected products named by the advisory: Prisma Access.
High [CVE-2026-0277] Prisma Access Agent: Improper Certificate Validation on iOS
CVE-2026-0277 Prisma Access Agent: Improper Certificate Validation on iOS
High [CVE-2026-0278] Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows
CVE-2026-0278 Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows
High [CVE-2026-0283] PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)
CVE-2026-0283 PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)
High [CVE-2026-0284] PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)
CVE-2026-0284 PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)
High [CVE-2026-0285] PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface
CVE-2026-0285 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface
High [CVE-2026-0286] PAN-OS: Authenticated Command Injection in CLI
CVE-2026-0286 PAN-OS: Authenticated Command Injection in CLI
High [CVE-2026-0287] PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing
CVE-2026-0287 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing Affected products named by the advisory: Cloud NGFW; Prisma Access.