Palo Alto security advisories, May 2026

Every Palo Alto Networks security advisory published in May 2026, from Palo Alto Networks Security Advisories, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 23
Critical: 4
High: 12
In CISA KEV: 4
CVEs: 114

Palo Alto advisories published in May 2026

May 28, 2026
Critical [CVE-2026-0265] PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled
Critical9.2
May 28, 2026
Critical [CVE-2026-0264] PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution
Critical9.2
May 28, 2026
Critical [CVE-2026-0263] PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing
Critical9.2
May 28, 2026
Critical [CVE-2026-0300] PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal
Critical9.3ExploitedCISA KEV
May 28, 2026
High [CVE-2026-0259] WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)
High7.1
May 28, 2026
High [CVE-2026-0261] PAN-OS: Authenticated Admin Command Injection Vulnerability
High8.6
May 28, 2026
High [CVE-2026-0262] PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing
High8.7
May 28, 2026
High [CVE-2026-0258] PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching
High8.3
May 28, 2026
Medium [CVE-2026-0256] PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
Medium6.9
May 13, 2026
High [CVE-2026-0243] denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices
High7.1
May 13, 2026
High [CVE-2026-0248] improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS
High8.6
May 13, 2026
High [CVE-2026-0244] improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION
High7.7
May 13, 2026
High [CVE-2026-0240] information disclosure vulnerability in Trust Protection Foundation
High7.4
May 13, 2026
High [CVE-2026-0241] Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities
High7.2
May 13, 2026
High [CVE-2026-0242] Trust Protection Foundation: SQL Injection Vulnerability
High8.6
May 13, 2026
High [CVE-2026-0246] Prisma Access Agent: Local Privilege Escalation Vulnerability
High8.5
May 13, 2026
High [CVE-2026-0247] Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities
High8.5
May 13, 2026
Medium [CVE-2026-0245] Multiple information disclosure vulnerabilities in Prisma Access Agent®
Medium6.8
May 13, 2026
Medium [CVE-2026-0238] vulnerability in Palo Alto Networks Broker VM
Medium4.8
May 13, 2026
Advisory [CVE-2026-0239] information disclosure vulnerability in the Chronosphere Chronocollector
Unrated
May 13, 2026
Advisory [CVE-2026-0235 +93] code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its…
UnratedExploitedCISA KEV
May 13, 2026
Advisory [CVE-2026-0235 +93] race condition vulnerability in Palo Alto Networks Prisma® Browser
UnratedExploitedCISA KEV
May 13, 2026
Advisory [CVE-2026-0235 +93] improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict…
UnratedExploitedCISA KEV

Get an email when Palo Alto publishes the next one.

See Palo Alto's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Palo Alto

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.