Palo Alto Networks Security Advisories & CVEs
93 advisories tracked · Palo Alto Networks Security Advisories · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Palo Alto CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Check if your Palo Alto device is affected
Pick your product and enter the exact software release it runs. We match it against the affected/fixed versions in Palo Alto's recent advisories.
Official source
Palo Alto Networks Security Advisories
Polled via the official security.paloaltonetworks.com RSS feed. Advisory pages are fetched for new items to extract affected/fixed version tables.
Latest Palo Alto advisories
Critical [CVE-2026-0310] PAN-OS: Buffer Overflow Vulnerability via XML Processing
CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing Affected products named by the advisory: Cloud NGFW; Prisma Access.
High [CVE-2026-0309] PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration
CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration
High [CVE-2026-0306] Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows
CVE-2026-0306 Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows
High [CVE-2026-76020 +18] PAN-SA-2026-0012 Chromium: Monthly Vulnerability Update (September 2026)
PAN-SA-2026-0012 Chromium: Monthly Vulnerability Update (September 2026)
High [CVE-2026-0307] GlobalProtect App: Local Privilege Escalation Vulnerabilities
CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities
High [CVE-2026-0304] Cortex XDR Broker VM: Privilege Escalation Vulnerability
CVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability
Medium [CVE-2026-0308] PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
Medium [CVE-2026-0305] Prisma Access Agent: Information Disclosure Vulnerability on Linux
CVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux
Medium [CVE-2026-0303] Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File
CVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File
Medium [CVE-2026-0302] Checkov by Prisma Cloud: OS Command Injection Vulnerability
CVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability
High [CVE-2026-0295] GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
High [CVE-2026-0294] Prisma Access Agent: Local Privilege Escalation
CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation
High [CVE-2026-0296] GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
High [CVE-2026-0297] GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
High [CVE-2026-0293] Prisma Access Agent: Anti-Tamper Protection Bypass on Windows
CVE-2026-0293 Prisma Access Agent: Anti-Tamper Protection Bypass on Windows
High [CVE-2026-0289 +448] PAN-SA-2026-0011 Chromium: Monthly Vulnerability Update (August 2026)
PAN-SA-2026-0011 Chromium: Monthly Vulnerability Update (August 2026)
High [CVE-2026-0298] GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)
CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)
Medium [CVE-2026-0292] Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows
CVE-2026-0292 Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows
Medium [CVE-2026-0291] Prisma Access Agent: Authenticated Limited File Deletion on Linux
CVE-2026-0291 Prisma Access Agent: Authenticated Limited File Deletion on Linux
Medium [CVE-2026-0301] PAN-OS: Information Disclosure Vulnerability in URL Filtering
CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering Affected products named by the advisory: Cloud NGFW; Prisma Access.