Advisory hub
Palo Alto Networks PAN-OS and GlobalProtect Vulnerabilities
4 advisories
PAN-OS firewalls and GlobalProtect gateways are high-value targets: they sit on the internet edge and a single management-plane flaw can hand an attacker the whole security policy. Palo Alto Networks recommends restricting management interfaces to trusted internal addresses regardless of patch level, and that guidance appears in most of its critical advisories.
This hub collects the Palo Alto Networks advisories we have covered, including Cortex XSOAR and XDR, with the fixed PAN-OS releases.
Advisories
| ID | Product & issue | Severity | KEV | Fix | Published |
|---|---|---|---|---|---|
| CVE-2026-0313 | Palo Alto Cortex XSOAR RCE | Critical | No | Vendor advisory | |
| CVE-2026-0322 | Palo Alto PAN-OS Code Injection | High | Yes | Vendor advisory | |
| CVE-2026-0310 | Palo Alto PAN-OS XML Overflow | High | No | Vendor advisory | |
| CVE-2026-0257 | Palo Alto PAN-OS Auth Bypass | Critical | No | Vendor advisory |
KEV: listed in CISA's Known Exploited Vulnerabilities catalog. “No” means not listed when we published, not that the flaw is safe to defer.
You're on the list.
We'll email you when the next issue goes out.
Free newsletter
The Daily Brief
The exploited vulnerabilities, patch priorities and regulatory changes worth acting on, in one short email.
- Exploited CVEs, with affected products and patch status
- Patch priorities ranked by real-world exploitation
- Regulatory changes: CERT-In, RBI, DPDP, DORA, NIS2
Free