Palo Alto security advisories, October 2026

Every Palo Alto Networks security advisory published in October 2026, from Palo Alto Networks Security Advisories, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 15
Critical: 2
High: 8
In CISA KEV: 4
CVEs: 464

Palo Alto advisories published in October 2026

Oct 26, 2026
Critical [CVE-2026-111497] Portfolio Status: Impact of Brotli Vulnerability on Palo Alto Networks Products
Critical9.2ExploitedCISA KEV
Oct 21, 2026
Critical [CVE-2026-109618 +1] Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products
Critical9.2ExploitedCISA KEV
Oct 14, 2026
High [CVE-2026-0320] PAN-OS: Authenticated Admin Command Injection Vulnerability
High8.6
Oct 14, 2026
High [CVE-2026-102299 +448] PAN-SA-2026-0013 Chromium: Monthly Vulnerability Update (October 2026)
HighExploitedCISA KEV
Oct 14, 2026
High [CVE-2026-0313] Cortex XSOAR: OS Command Injection Vulnerability
High8.6
Oct 14, 2026
High [CVE-2026-0318] PAN-OS: Denial of Service (DoS) on Panorama
High8.2
Oct 14, 2026
High [CVE-2026-0321] PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services
High8.7
Oct 14, 2026
High [CVE-2026-0315] GlobalProtect App: Local Privilege Escalation Vulnerability on macOS
High8.5
Oct 14, 2026
High [CVE-2026-0319] PAN-OS: Improper Input Handling Vulnerability
High7.6
Oct 14, 2026
High [CVE-2026-0322] PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
HighExploitedCISA KEV
Oct 14, 2026
Medium [CVE-2026-0317] PAN-OS: Denial of Service Vulnerability
Medium5.1
Oct 14, 2026
Medium [CVE-2026-0314] GlobalProtect App: Local Denial of Service (DoS) on Windows
Medium6.8
Oct 14, 2026
Medium [CVE-2026-0312] Checkov by Prisma Cloud: Path Traversal Vulnerabilities
Medium6.8
Oct 14, 2026
Medium [CVE-2026-0316] PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability
Medium4.8
Oct 14, 2026
Medium [CVE-2026-0311] Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability
Medium4.8

Get an email when Palo Alto publishes the next one.

See Palo Alto's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Palo Alto

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.