Vulnerability-Lookup

CVE-2026-0279 (GCVE-0-2026-0279)

Vulnerability from cvelistv5 – Published: 2026-07-09 19:08 – Updated: 2026-07-09 19:23

Title

PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities

Summary

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payload. The security risk posed by this issue is minimized when the management interface and access to the User-ID™ Authentication Portal is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW is not affected by this vulnerability.

Severity

1.3 (Low)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

1.2 (Low)


                        
                          CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

0.4 (Low)


                        
                          CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

palo_alto

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0279	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	Cloud NGFW	Unaffected: All (custom)
Palo Alto Networks	PAN-OS	Affected: 12.1.0 , < 12.1.8 (custom) Affected: 11.2.0 , < 11.2.13 (custom) Affected: 11.1.0 , < 11.1.16 (custom) Affected: 10.2.0 , < 10.2.18-h8 (custom) cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:::::::* cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:::::::* cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:::::::* cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:::::::* cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:::::::* cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:::::: cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:::::::* cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:::::: cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:::::::* cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:::::::*
Palo Alto Networks	Prisma Access	Affected: 12.1.0 , < 12.1.8 (custom) Affected: 11.2.0 (custom) Affected: 10.2.0 (custom)

Date Public

2026-07-08 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0279",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T19:23:35.978278Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-09T19:23:42.200Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "affected",
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.1.8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.8",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.13",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.16",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "10.2.18-h8",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.16-h9",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.13-h23",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.10-h39",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.7-h36",
                  "status": "unaffected"
                }
              ],
              "lessThan": "10.2.18-h8",
              "status": "affected",
              "version": "10.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.1.8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.8",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "10.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.8",
                  "versionStartIncluding": "12.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.2.13",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.1.16",
                  "versionStartIncluding": "11.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "10.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.1.8",
                  "versionStartIncluding": "12.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "11.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "10.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-07-08T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Multiple cross site scripting vulnerabilities in the User-ID\u2122 Authentication Portal (aka Captive Portal) service, GlobalProtect\u2122 gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS\u00ae software enables a malicious unauthenticated user to store or execute malicious JavaScript payload.\u003cbr\u003e\u003cp\u003e\u003cspan\u003eThe security risk posed by this issue is minimized when the management interface and access to the User-ID\u2122 Authentication Portal is restricted to only trusted internal IP addresses according to our recommended\u003c/span\u003e \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\"\u003e\u003cspan\u003ebest practice deployment guidelines\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e.\u003cbr\u003e\u003cbr\u003e\u003c/span\u003e\u003cspan\u003eThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\u003c/span\u003e\u003cb\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/b\u003e\u003cspan\u003eCloud NGFW is not affected by this vulnerability.\u003c/span\u003e\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "Multiple cross site scripting vulnerabilities in the User-ID\u2122 Authentication Portal (aka Captive Portal) service, GlobalProtect\u2122 gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS\u00ae software enables a malicious unauthenticated user to store or execute malicious JavaScript payload.\n\n\nThe security risk posed by this issue is minimized when the management interface and access to the User-ID\u2122 Authentication Portal is restricted to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\n\nThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\n\nCloud NGFW is not affected by this vulnerability."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-63",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-63 Cross-Site Scripting (XSS)"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 1.3,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "The risk is highest when you allow access to the management interface from external IP addresses on the internet."
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 1.2,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "You can reduce the risk of exploitation by restricting access to a jump box that is the only system allowed to access the management interface."
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 0.4,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "The risk of exploitation is lower for Prisma Access as it requires an authenticated user and the external network access to the management interface is restricted."
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-09T19:08:41.656Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0279"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCloud NGFW\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 12.1\u003c/td\u003e\u003ctd\u003e12.1.2 through 12.1.7-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 12.1.8\u0026nbsp; or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 11.2\u003c/td\u003e\u003ctd\u003e11.2.0 through 11.2.12\u003c/td\u003e\u003ctd\u003eUpgrade to 11.2.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 11.1\u003c/td\u003e\u003ctd\u003e11.1.0 through 11.1.15-h*\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.16\u0026nbsp; or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 10.2\u003c/td\u003e\u003ctd\u003e10.2.0 through 10.2*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.16, 11.2.13, 12.1.8  or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eAll older\u003cbr\u003eunsupported\u003cbr\u003ePAN-OS versions\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eUpgrade to a supported fixed version.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u0026nbsp;Prisma Access 12.1\u003c/td\u003e\u003ctd\u003e12.1.2 through 12.1.7-h*\u003c/td\u003e\u003ctd\u003e\u0026nbsp;Upgrade to 12.1.8  or later.*\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access 11.2\u003c/td\u003e\u003ctd\u003e11.2.0 through 11.2*\u003c/td\u003e\u003ctd\u003eUpgrade to 12.1.8 or later.*\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access 10.2\u003c/td\u003e\u003ctd\u003e10.2.0 through 10.2*\u003c/td\u003e\u003ctd\u003eUpgrade to 12.1.8 or later.*\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003e* See the note under Product Status for information regarding Prisma Access upgrades."
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\nCloud NGFW\nNo action needed.PAN-OS 12.112.1.2 through 12.1.7-h*Upgrade to 12.1.8\u00a0 or later.PAN-OS 11.211.2.0 through 11.2.12Upgrade to 11.2.13 or later.PAN-OS 11.111.1.0 through 11.1.15-h*\nUpgrade to 11.1.16\u00a0 or later.PAN-OS 10.210.2.0 through 10.2*Upgrade to 11.1.16, 11.2.13, 12.1.8  or later.All older\nunsupported\nPAN-OS versions\u00a0Upgrade to a supported fixed version.\u00a0Prisma Access 12.112.1.2 through 12.1.7-h*\u00a0Upgrade to 12.1.8  or later.*Prisma Access 11.211.2.0 through 11.2*Upgrade to 12.1.8 or later.*Prisma Access 10.210.2.0 through 10.2*Upgrade to 12.1.8 or later.*\n* See the note under Product Status for information regarding Prisma Access upgrades."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-07-08T20:30:00.000Z",
          "value": "Updated the Unaffected version for Prisma Access."
        },
        {
          "lang": "en",
          "time": "2026-07-08T16:00:00.000Z",
          "value": "Initial publication"
        }
      ],
      "title": "PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThe vast majority of firewalls already follow Palo Alto Networks\u0027 and industry best practices. However, if you have not already, we strongly recommend that you secure access to your management interface according to our \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\"\u003ebest practice deployment guidelines\u003c/a\u003e.\u0026nbsp;Specifically, you should restrict management interface access to only trusted internal IP addresses.\u003c/p\u003e\u003cp\u003eReview information about how to secure management access to your Palo Alto Networks firewalls:\u003c/p\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\"\u003e\u003c/a\u003e\u003cul\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\"\u003e\u003c/a\u003e\u003cli\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\"\u003e\u003c/a\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\"\u003ePalo Alto Networks LIVEcommunity article\u003c/a\u003e\u003c/li\u003e\u003cli\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices\"\u003ePalo Alto Networks official and detailed technical documentation\u003c/a\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "The vast majority of firewalls already follow Palo Alto Networks\u0027 and industry best practices. However, if you have not already, we strongly recommend that you secure access to your management interface according to our  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\u00a0Specifically, you should restrict management interface access to only trusted internal IP addresses.\n\n\n\nReview information about how to secure management access to your Palo Alto Networks firewalls:\n\n  https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431   https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431   *    https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431  Palo Alto Networks LIVEcommunity article https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 \n  *   Palo Alto Networks official and detailed technical documentation https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices"
        }
      ],
      "x_affectedList": [
        "PAN-OS 12.1.7",
        "PAN-OS 12.1.6",
        "PAN-OS 12.1.5",
        "PAN-OS 12.1.4-h6",
        "PAN-OS 12.1.4-h5",
        "PAN-OS 12.1.4-h3",
        "PAN-OS 12.1.4-h2",
        "PAN-OS 12.1.4",
        "PAN-OS 12.1.3-h3",
        "PAN-OS 12.1.3-h1",
        "PAN-OS 12.1.3",
        "PAN-OS 12.1.2",
        "PAN-OS 11.2.12",
        "PAN-OS 11.2.11",
        "PAN-OS 11.2.10-h8",
        "PAN-OS 11.2.10-h7",
        "PAN-OS 11.2.10-h6",
        "PAN-OS 11.2.10-h5",
        "PAN-OS 11.2.10-h4",
        "PAN-OS 11.2.10-h3",
        "PAN-OS 11.2.10-h2",
        "PAN-OS 11.2.10-h1",
        "PAN-OS 11.2.10",
        "PAN-OS 11.2.9",
        "PAN-OS 11.2.8",
        "PAN-OS 11.2.7-h15",
        "PAN-OS 11.2.7-h14",
        "PAN-OS 11.2.7-h13",
        "PAN-OS 11.2.7-h12",
        "PAN-OS 11.2.7-h11",
        "PAN-OS 11.2.7-h10",
        "PAN-OS 11.2.7-h8",
        "PAN-OS 11.2.7-h7",
        "PAN-OS 11.2.7-h4",
        "PAN-OS 11.2.7-h3",
        "PAN-OS 11.2.7-h2",
        "PAN-OS 11.2.7-h1",
        "PAN-OS 11.2.7",
        "PAN-OS 11.2.6",
        "PAN-OS 11.2.5",
        "PAN-OS 11.2.4-h17",
        "PAN-OS 11.2.4-h15",
        "PAN-OS 11.2.4-h14",
        "PAN-OS 11.2.4-h12",
        "PAN-OS 11.2.4-h11",
        "PAN-OS 11.2.4-h10",
        "PAN-OS 11.2.4-h9",
        "PAN-OS 11.2.4-h8",
        "PAN-OS 11.2.4-h7",
        "PAN-OS 11.2.4-h6",
        "PAN-OS 11.2.4-h5",
        "PAN-OS 11.2.4-h4",
        "PAN-OS 11.2.4-h3",
        "PAN-OS 11.2.4-h2",
        "PAN-OS 11.2.4-h1",
        "PAN-OS 11.2.4",
        "PAN-OS 11.2.3-h5",
        "PAN-OS 11.2.3-h4",
        "PAN-OS 11.2.3-h3",
        "PAN-OS 11.2.3-h2",
        "PAN-OS 11.2.3-h1",
        "PAN-OS 11.2.3",
        "PAN-OS 11.2.2-h2",
        "PAN-OS 11.2.2-h1",
        "PAN-OS 11.2.1-h1",
        "PAN-OS 11.2.1",
        "PAN-OS 11.2.0-h1",
        "PAN-OS 11.2.0",
        "PAN-OS 11.1.15",
        "PAN-OS 11.1.14",
        "PAN-OS 11.1.13-h6",
        "PAN-OS 11.1.13-h5",
        "PAN-OS 11.1.13-h3",
        "PAN-OS 11.1.13-h2",
        "PAN-OS 11.1.13-h1",
        "PAN-OS 11.1.13",
        "PAN-OS 11.1.12",
        "PAN-OS 11.1.11",
        "PAN-OS 11.1.10-h26",
        "PAN-OS 11.1.10-h25",
        "PAN-OS 11.1.10-h21",
        "PAN-OS 11.1.10-h12",
        "PAN-OS 11.1.10-h10",
        "PAN-OS 11.1.10-h9",
        "PAN-OS 11.1.10-h7",
        "PAN-OS 11.1.10-h5",
        "PAN-OS 11.1.10-h4",
        "PAN-OS 11.1.10-h1",
        "PAN-OS 11.1.10",
        "PAN-OS 11.1.9",
        "PAN-OS 11.1.8",
        "PAN-OS 11.1.6-h32",
        "PAN-OS 11.1.6-h29",
        "PAN-OS 11.1.6-h25",
        "PAN-OS 11.1.6-h23",
        "PAN-OS 11.1.6-h22",
        "PAN-OS 11.1.6-h21",
        "PAN-OS 11.1.6-h20",
        "PAN-OS 11.1.6-h19",
        "PAN-OS 11.1.6-h18",
        "PAN-OS 11.1.6-h17",
        "PAN-OS 11.1.6-h14",
        "PAN-OS 11.1.6-h10",
        "PAN-OS 11.1.6-h7",
        "PAN-OS 11.1.6-h6",
        "PAN-OS 11.1.6-h4",
        "PAN-OS 11.1.6-h3",
        "PAN-OS 11.1.6-h2",
        "PAN-OS 11.1.6-h1",
        "PAN-OS 11.1.6",
        "PAN-OS 11.1.5-h1",
        "PAN-OS 11.1.5",
        "PAN-OS 11.1.4-h33",
        "PAN-OS 11.1.4-h32",
        "PAN-OS 11.1.4-h27",
        "PAN-OS 11.1.4-h25",
        "PAN-OS 11.1.4-h18",
        "PAN-OS 11.1.4-h17",
        "PAN-OS 11.1.4-h15",
        "PAN-OS 11.1.4-h13",
        "PAN-OS 11.1.4-h12",
        "PAN-OS 11.1.4-h11",
        "PAN-OS 11.1.4-h10",
        "PAN-OS 11.1.4-h9",
        "PAN-OS 11.1.4-h8",
        "PAN-OS 11.1.4-h7",
        "PAN-OS 11.1.4-h6",
        "PAN-OS 11.1.4-h5",
        "PAN-OS 11.1.4-h4",
        "PAN-OS 11.1.4-h3",
        "PAN-OS 11.1.4-h2",
        "PAN-OS 11.1.4-h1",
        "PAN-OS 11.1.4",
        "PAN-OS 11.1.3-h13",
        "PAN-OS 11.1.3-h12",
        "PAN-OS 11.1.3-h11",
        "PAN-OS 11.1.3-h10",
        "PAN-OS 11.1.3-h9",
        "PAN-OS 11.1.3-h8",
        "PAN-OS 11.1.3-h7",
        "PAN-OS 11.1.3-h6",
        "PAN-OS 11.1.3-h5",
        "PAN-OS 11.1.3-h4",
        "PAN-OS 11.1.3-h3",
        "PAN-OS 11.1.3-h2",
        "PAN-OS 11.1.3-h1",
        "PAN-OS 11.1.3",
        "PAN-OS 11.1.2-h18",
        "PAN-OS 11.1.2-h17",
        "PAN-OS 11.1.2-h16",
        "PAN-OS 11.1.2-h15",
        "PAN-OS 11.1.2-h14",
        "PAN-OS 11.1.2-h13",
        "PAN-OS 11.1.2-h12",
        "PAN-OS 11.1.2-h11",
        "PAN-OS 11.1.2-h10",
        "PAN-OS 11.1.2-h9",
        "PAN-OS 11.1.2-h8",
        "PAN-OS 11.1.2-h7",
        "PAN-OS 11.1.2-h6",
        "PAN-OS 11.1.2-h5",
        "PAN-OS 11.1.2-h4",
        "PAN-OS 11.1.2-h3",
        "PAN-OS 11.1.2-h2",
        "PAN-OS 11.1.2-h1",
        "PAN-OS 11.1.2",
        "PAN-OS 11.1.1-h2",
        "PAN-OS 11.1.1-h1",
        "PAN-OS 11.1.1",
        "PAN-OS 11.1.0-h4",
        "PAN-OS 11.1.0-h3",
        "PAN-OS 11.1.0-h2",
        "PAN-OS 11.1.0-h1",
        "PAN-OS 11.1.0",
        "PAN-OS 10.2.18-h6",
        "PAN-OS 10.2.18-h5",
        "PAN-OS 10.2.18-h1",
        "PAN-OS 10.2.18",
        "PAN-OS 10.2.17",
        "PAN-OS 10.2.16-h7",
        "PAN-OS 10.2.16-h6",
        "PAN-OS 10.2.16-h4",
        "PAN-OS 10.2.16-h1",
        "PAN-OS 10.2.16",
        "PAN-OS 10.2.15",
        "PAN-OS 10.2.14-h1",
        "PAN-OS 10.2.14",
        "PAN-OS 10.2.13-h21",
        "PAN-OS 10.2.13-h18",
        "PAN-OS 10.2.13-h16",
        "PAN-OS 10.2.13-h15",
        "PAN-OS 10.2.13-h10",
        "PAN-OS 10.2.13-h7",
        "PAN-OS 10.2.13-h5",
        "PAN-OS 10.2.13-h4",
        "PAN-OS 10.2.13-h3",
        "PAN-OS 10.2.13-h2",
        "PAN-OS 10.2.13-h1",
        "PAN-OS 10.2.13",
        "PAN-OS 10.2.12-h6",
        "PAN-OS 10.2.12-h5",
        "PAN-OS 10.2.12-h4",
        "PAN-OS 10.2.12-h3",
        "PAN-OS 10.2.12-h2",
        "PAN-OS 10.2.12-h1",
        "PAN-OS 10.2.12",
        "PAN-OS 10.2.11-h13",
        "PAN-OS 10.2.11-h12",
        "PAN-OS 10.2.11-h11",
        "PAN-OS 10.2.11-h10",
        "PAN-OS 10.2.11-h9",
        "PAN-OS 10.2.11-h8",
        "PAN-OS 10.2.11-h7",
        "PAN-OS 10.2.11-h6",
        "PAN-OS 10.2.11-h5",
        "PAN-OS 10.2.11-h4",
        "PAN-OS 10.2.11-h3",
        "PAN-OS 10.2.11-h2",
        "PAN-OS 10.2.11-h1",
        "PAN-OS 10.2.11",
        "PAN-OS 10.2.10-h36",
        "PAN-OS 10.2.10-h31",
        "PAN-OS 10.2.10-h30",
        "PAN-OS 10.2.10-h27",
        "PAN-OS 10.2.10-h26",
        "PAN-OS 10.2.10-h23",
        "PAN-OS 10.2.10-h21",
        "PAN-OS 10.2.10-h18",
        "PAN-OS 10.2.10-h17",
        "PAN-OS 10.2.10-h14",
        "PAN-OS 10.2.10-h13",
        "PAN-OS 10.2.10-h12",
        "PAN-OS 10.2.10-h11",
        "PAN-OS 10.2.10-h10",
        "PAN-OS 10.2.10-h9",
        "PAN-OS 10.2.10-h8",
        "PAN-OS 10.2.10-h7",
        "PAN-OS 10.2.10-h6",
        "PAN-OS 10.2.10-h5",
        "PAN-OS 10.2.10-h4",
        "PAN-OS 10.2.10-h3",
        "PAN-OS 10.2.10-h2",
        "PAN-OS 10.2.10-h1",
        "PAN-OS 10.2.10",
        "PAN-OS 10.2.9-h21",
        "PAN-OS 10.2.9-h20",
        "PAN-OS 10.2.9-h19",
        "PAN-OS 10.2.9-h18",
        "PAN-OS 10.2.9-h17",
        "PAN-OS 10.2.9-h16",
        "PAN-OS 10.2.9-h15",
        "PAN-OS 10.2.9-h14",
        "PAN-OS 10.2.9-h13",
        "PAN-OS 10.2.9-h12",
        "PAN-OS 10.2.9-h11",
        "PAN-OS 10.2.9-h10",
        "PAN-OS 10.2.9-h9",
        "PAN-OS 10.2.9-h8",
        "PAN-OS 10.2.9-h7",
        "PAN-OS 10.2.9-h6",
        "PAN-OS 10.2.9-h5",
        "PAN-OS 10.2.9-h4",
        "PAN-OS 10.2.9-h3",
        "PAN-OS 10.2.9-h2",
        "PAN-OS 10.2.9-h1",
        "PAN-OS 10.2.9",
        "PAN-OS 10.2.8-h21",
        "PAN-OS 10.2.8-h20",
        "PAN-OS 10.2.8-h19",
        "PAN-OS 10.2.8-h18",
        "PAN-OS 10.2.8-h17",
        "PAN-OS 10.2.8-h16",
        "PAN-OS 10.2.8-h15",
        "PAN-OS 10.2.8-h14",
        "PAN-OS 10.2.8-h13",
        "PAN-OS 10.2.8-h12",
        "PAN-OS 10.2.8-h11",
        "PAN-OS 10.2.8-h10",
        "PAN-OS 10.2.8-h9",
        "PAN-OS 10.2.8-h8",
        "PAN-OS 10.2.8-h7",
        "PAN-OS 10.2.8-h6",
        "PAN-OS 10.2.8-h5",
        "PAN-OS 10.2.8-h4",
        "PAN-OS 10.2.8-h3",
        "PAN-OS 10.2.8-h2",
        "PAN-OS 10.2.8-h1",
        "PAN-OS 10.2.8",
        "PAN-OS 10.2.7-h34",
        "PAN-OS 10.2.7-h32",
        "PAN-OS 10.2.7-h24",
        "PAN-OS 10.2.7-h23",
        "PAN-OS 10.2.7-h22",
        "PAN-OS 10.2.7-h21",
        "PAN-OS 10.2.7-h20",
        "PAN-OS 10.2.7-h19",
        "PAN-OS 10.2.7-h18",
        "PAN-OS 10.2.7-h17",
        "PAN-OS 10.2.7-h16",
        "PAN-OS 10.2.7-h15",
        "PAN-OS 10.2.7-h14",
        "PAN-OS 10.2.7-h13",
        "PAN-OS 10.2.7-h12",
        "PAN-OS 10.2.7-h11",
        "PAN-OS 10.2.7-h10",
        "PAN-OS 10.2.7-h9",
        "PAN-OS 10.2.7-h8",
        "PAN-OS 10.2.7-h7",
        "PAN-OS 10.2.7-h6",
        "PAN-OS 10.2.7-h5",
        "PAN-OS 10.2.7-h4",
        "PAN-OS 10.2.7-h3",
        "PAN-OS 10.2.7-h2",
        "PAN-OS 10.2.7-h1",
        "PAN-OS 10.2.7",
        "PAN-OS 10.2.6-h6",
        "PAN-OS 10.2.6-h5",
        "PAN-OS 10.2.6-h4",
        "PAN-OS 10.2.6-h3",
        "PAN-OS 10.2.6-h2",
        "PAN-OS 10.2.6-h1",
        "PAN-OS 10.2.6",
        "PAN-OS 10.2.5-h9",
        "PAN-OS 10.2.5-h8",
        "PAN-OS 10.2.5-h7",
        "PAN-OS 10.2.5-h6",
        "PAN-OS 10.2.5-h5",
        "PAN-OS 10.2.5-h4",
        "PAN-OS 10.2.5-h3",
        "PAN-OS 10.2.5-h2",
        "PAN-OS 10.2.5-h1",
        "PAN-OS 10.2.5",
        "PAN-OS 10.2.4-h32",
        "PAN-OS 10.2.4-h31",
        "PAN-OS 10.2.4-h30",
        "PAN-OS 10.2.4-h29",
        "PAN-OS 10.2.4-h28",
        "PAN-OS 10.2.4-h27",
        "PAN-OS 10.2.4-h26",
        "PAN-OS 10.2.4-h25",
        "PAN-OS 10.2.4-h24",
        "PAN-OS 10.2.4-h23",
        "PAN-OS 10.2.4-h22",
        "PAN-OS 10.2.4-h21",
        "PAN-OS 10.2.4-h20",
        "PAN-OS 10.2.4-h19",
        "PAN-OS 10.2.4-h18",
        "PAN-OS 10.2.4-h17",
        "PAN-OS 10.2.4-h16",
        "PAN-OS 10.2.4-h15",
        "PAN-OS 10.2.4-h14",
        "PAN-OS 10.2.4-h13",
        "PAN-OS 10.2.4-h12",
        "PAN-OS 10.2.4-h11",
        "PAN-OS 10.2.4-h10",
        "PAN-OS 10.2.4-h9",
        "PAN-OS 10.2.4-h8",
        "PAN-OS 10.2.4-h7",
        "PAN-OS 10.2.4-h6",
        "PAN-OS 10.2.4-h5",
        "PAN-OS 10.2.4-h4",
        "PAN-OS 10.2.4-h3",
        "PAN-OS 10.2.4-h2",
        "PAN-OS 10.2.4-h1",
        "PAN-OS 10.2.4",
        "PAN-OS 10.2.3-h14",
        "PAN-OS 10.2.3-h13",
        "PAN-OS 10.2.3-h12",
        "PAN-OS 10.2.3-h11",
        "PAN-OS 10.2.3-h10",
        "PAN-OS 10.2.3-h9",
        "PAN-OS 10.2.3-h8",
        "PAN-OS 10.2.3-h7",
        "PAN-OS 10.2.3-h6",
        "PAN-OS 10.2.3-h5",
        "PAN-OS 10.2.3-h4",
        "PAN-OS 10.2.3-h3",
        "PAN-OS 10.2.3-h2",
        "PAN-OS 10.2.3-h1",
        "PAN-OS 10.2.3",
        "PAN-OS 10.2.2-h6",
        "PAN-OS 10.2.2-h5",
        "PAN-OS 10.2.2-h4",
        "PAN-OS 10.2.2-h3",
        "PAN-OS 10.2.2-h2",
        "PAN-OS 10.2.2-h1",
        "PAN-OS 10.2.2",
        "PAN-OS 10.2.1-h3",
        "PAN-OS 10.2.1-h2",
        "PAN-OS 10.2.1-h1",
        "PAN-OS 10.2.1",
        "PAN-OS 10.2.0-h4",
        "PAN-OS 10.2.0-h3",
        "PAN-OS 10.2.0-h2",
        "PAN-OS 10.2.0-h1",
        "PAN-OS 10.2.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0279",
    "datePublished": "2026-07-09T19:08:41.656Z",
    "dateReserved": "2025-11-03T20:44:38.280Z",
    "dateUpdated": "2026-07-09T19:23:42.200Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-0279\",\"sourceIdentifier\":\"psirt@paloaltonetworks.com\",\"published\":\"2026-07-09T19:16:58.717\",\"lastModified\":\"2026-07-09T20:16:25.130\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple cross site scripting vulnerabilities in the User-ID\u2122 Authentication Portal (aka Captive Portal) service, GlobalProtect\u2122 gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS\u00ae software enables a malicious unauthenticated user to store or execute malicious JavaScript payload.\\n\\n\\nThe security risk posed by this issue is minimized when the management interface and access to the User-ID\u2122 Authentication Portal is restricted to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\\n\\nThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\\n\\nCloud NGFW is not affected by this vulnerability.\"}],\"affected\":[{\"source\":\"psirt@paloaltonetworks.com\",\"affectedData\":[{\"vendor\":\"Palo Alto Networks\",\"product\":\"Cloud NGFW\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"All\",\"versionType\":\"custom\",\"status\":\"unaffected\"}]},{\"vendor\":\"Palo Alto Networks\",\"product\":\"PAN-OS\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"12.1.0\",\"lessThan\":\"12.1.8\",\"versionType\":\"custom\",\"status\":\"affected\",\"changes\":[{\"at\":\"12.1.8\",\"status\":\"unaffected\"}]},{\"version\":\"11.2.0\",\"lessThan\":\"11.2.13\",\"versionType\":\"custom\",\"status\":\"affected\",\"changes\":[{\"at\":\"11.2.13\",\"status\":\"unaffected\"}]},{\"version\":\"11.1.0\",\"lessThan\":\"11.1.16\",\"versionType\":\"custom\",\"status\":\"affected\",\"changes\":[{\"at\":\"11.1.16\",\"status\":\"unaffected\"}]},{\"version\":\"10.2.0\",\"lessThan\":\"10.2.18-h8\",\"versionType\":\"custom\",\"status\":\"affected\",\"changes\":[{\"at\":\"10.2.18-h8\",\"status\":\"unaffected\"},{\"at\":\"10.2.16-h9\",\"status\":\"unaffected\"},{\"at\":\"10.2.13-h23\",\"status\":\"unaffected\"},{\"at\":\"10.2.10-h39\",\"status\":\"unaffected\"},{\"at\":\"10.2.7-h36\",\"status\":\"unaffected\"}]}]},{\"vendor\":\"Palo Alto Networks\",\"product\":\"Prisma Access\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"12.1.0\",\"lessThan\":\"12.1.8\",\"versionType\":\"custom\",\"status\":\"affected\",\"changes\":[{\"at\":\"12.1.8\",\"status\":\"unaffected\"}]},{\"version\":\"11.2.0\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"10.2.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"psirt@paloaltonetworks.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber\",\"baseScore\":1.3,\"baseSeverity\":\"LOW\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"PASSIVE\",\"vulnConfidentialityImpact\":\"LOW\",\"vulnIntegrityImpact\":\"LOW\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"UNREPORTED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NO\",\"Recovery\":\"USER\",\"valueDensity\":\"DIFFUSE\",\"vulnerabilityResponseEffort\":\"MODERATE\",\"providerUrgency\":\"AMBER\"}}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-07-09T19:23:35.978278Z\",\"id\":\"CVE-2026-0279\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@paloaltonetworks.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]}],\"references\":[{\"url\":\"https://security.paloaltonetworks.com/CVE-2026-0279\",\"source\":\"psirt@paloaltonetworks.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-0279\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-07-09T19:23:35.978278Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-07-09T19:23:38.958Z\"}}], \"cna\": {\"title\": \"PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities\", \"source\": {\"discovery\": \"INTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"our internal security research teams\"}], \"impacts\": [{\"capecId\": \"CAPEC-63\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-63 Cross-Site Scripting (XSS)\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"USER\", \"baseScore\": 1.3, \"Automatable\": \"NO\", \"attackVector\": \"NETWORK\", \"baseSeverity\": \"LOW\", \"valueDensity\": \"DIFFUSE\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber\", \"exploitMaturity\": \"UNREPORTED\", \"providerUrgency\": \"AMBER\", \"userInteraction\": \"PASSIVE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"LOW\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"LOW\", \"vulnerabilityResponseEffort\": \"MODERATE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"The risk is highest when you allow access to the management interface from external IP addresses on the internet.\"}]}, {\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"USER\", \"baseScore\": 1.2, \"Automatable\": \"NO\", \"attackVector\": \"ADJACENT\", \"baseSeverity\": \"LOW\", \"valueDensity\": \"DIFFUSE\", \"vectorString\": \"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber\", \"exploitMaturity\": \"UNREPORTED\", \"providerUrgency\": \"AMBER\", \"userInteraction\": \"PASSIVE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"LOW\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"LOW\", \"vulnerabilityResponseEffort\": \"MODERATE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"You can reduce the risk of exploitation by restricting access to a jump box that is the only system allowed to access the management interface.\"}]}, {\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"USER\", \"baseScore\": 0.4, \"Automatable\": \"NO\", \"attackVector\": \"ADJACENT\", \"baseSeverity\": \"LOW\", \"valueDensity\": \"DIFFUSE\", \"vectorString\": \"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber\", \"exploitMaturity\": \"UNREPORTED\", \"providerUrgency\": \"AMBER\", \"userInteraction\": \"PASSIVE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"LOW\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"LOW\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"LOW\", \"vulnerabilityResponseEffort\": \"MODERATE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"The risk of exploitation is lower for Prisma Access as it requires an authenticated user and the external network access to the management interface is restricted.\"}]}], \"affected\": [{\"vendor\": \"Palo Alto Networks\", \"product\": \"Cloud NGFW\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"All\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*\"], \"vendor\": \"Palo Alto Networks\", \"product\": \"PAN-OS\", \"versions\": [{\"status\": \"affected\", \"changes\": [{\"at\": \"12.1.8\", \"status\": \"unaffected\"}], \"version\": \"12.1.0\", \"lessThan\": \"12.1.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"11.2.13\", \"status\": \"unaffected\"}], \"version\": \"11.2.0\", \"lessThan\": \"11.2.13\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"11.1.16\", \"status\": \"unaffected\"}], \"version\": \"11.1.0\", \"lessThan\": \"11.1.16\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"10.2.18-h8\", \"status\": \"unaffected\"}, {\"at\": \"10.2.16-h9\", \"status\": \"unaffected\"}, {\"at\": \"10.2.13-h23\", \"status\": \"unaffected\"}, {\"at\": \"10.2.10-h39\", \"status\": \"unaffected\"}, {\"at\": \"10.2.7-h36\", \"status\": \"unaffected\"}], \"version\": \"10.2.0\", \"lessThan\": \"10.2.18-h8\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Palo Alto Networks\", \"product\": \"Prisma Access\", \"versions\": [{\"status\": \"affected\", \"changes\": [{\"at\": \"12.1.8\", \"status\": \"unaffected\"}], \"version\": \"12.1.0\", \"lessThan\": \"12.1.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"11.2.0\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"10.2.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"Palo Alto Networks is not aware of any malicious exploitation of these issues.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Palo Alto Networks is not aware of any malicious exploitation of these issues.\", \"base64\": false}]}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-07-08T20:30:00.000Z\", \"value\": \"Updated the Unaffected version for Prisma Access.\"}, {\"lang\": \"en\", \"time\": \"2026-07-08T16:00:00.000Z\", \"value\": \"Initial publication\"}], \"solutions\": [{\"lang\": \"eng\", \"value\": \"Version\\nMinor Version\\nSuggested Solution\\nCloud NGFW\\nNo action needed.PAN-OS 12.112.1.2 through 12.1.7-h*Upgrade to 12.1.8\\u00a0 or later.PAN-OS 11.211.2.0 through 11.2.12Upgrade to 11.2.13 or later.PAN-OS 11.111.1.0 through 11.1.15-h*\\nUpgrade to 11.1.16\\u00a0 or later.PAN-OS 10.210.2.0 through 10.2*Upgrade to 11.1.16, 11.2.13, 12.1.8  or later.All older\\nunsupported\\nPAN-OS versions\\u00a0Upgrade to a supported fixed version.\\u00a0Prisma Access 12.112.1.2 through 12.1.7-h*\\u00a0Upgrade to 12.1.8  or later.*Prisma Access 11.211.2.0 through 11.2*Upgrade to 12.1.8 or later.*Prisma Access 10.210.2.0 through 10.2*Upgrade to 12.1.8 or later.*\\n* See the note under Product Status for information regarding Prisma Access upgrades.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCloud NGFW\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 12.1\u003c/td\u003e\u003ctd\u003e12.1.2 through 12.1.7-h*\u003c/td\u003e\u003ctd\u003eUpgrade to 12.1.8\u0026nbsp; or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 11.2\u003c/td\u003e\u003ctd\u003e11.2.0 through 11.2.12\u003c/td\u003e\u003ctd\u003eUpgrade to 11.2.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 11.1\u003c/td\u003e\u003ctd\u003e11.1.0 through 11.1.15-h*\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.16\u0026nbsp; or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePAN-OS 10.2\u003c/td\u003e\u003ctd\u003e10.2.0 through 10.2*\u003c/td\u003e\u003ctd\u003eUpgrade to 11.1.16, 11.2.13, 12.1.8  or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eAll older\u003cbr\u003eunsupported\u003cbr\u003ePAN-OS versions\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eUpgrade to a supported fixed version.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u0026nbsp;Prisma Access 12.1\u003c/td\u003e\u003ctd\u003e12.1.2 through 12.1.7-h*\u003c/td\u003e\u003ctd\u003e\u0026nbsp;Upgrade to 12.1.8  or later.*\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access 11.2\u003c/td\u003e\u003ctd\u003e11.2.0 through 11.2*\u003c/td\u003e\u003ctd\u003eUpgrade to 12.1.8 or later.*\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePrisma Access 10.2\u003c/td\u003e\u003ctd\u003e10.2.0 through 10.2*\u003c/td\u003e\u003ctd\u003eUpgrade to 12.1.8 or later.*\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003e* See the note under Product Status for information regarding Prisma Access upgrades.\", \"base64\": false}]}], \"datePublic\": \"2026-07-08T16:00:00.000Z\", \"references\": [{\"url\": \"https://security.paloaltonetworks.com/CVE-2026-0279\", \"tags\": [\"vendor-advisory\"]}], \"workarounds\": [{\"lang\": \"eng\", \"value\": \"The vast majority of firewalls already follow Palo Alto Networks\u0027 and industry best practices. However, if you have not already, we strongly recommend that you secure access to your management interface according to our  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\\u00a0Specifically, you should restrict management interface access to only trusted internal IP addresses.\\n\\n\\n\\nReview information about how to secure management access to your Palo Alto Networks firewalls:\\n\\n  https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431   https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431   *    https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431  Palo Alto Networks LIVEcommunity article https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 \\n  *   Palo Alto Networks official and detailed technical documentation https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eThe vast majority of firewalls already follow Palo Alto Networks\u0027 and industry best practices. However, if you have not already, we strongly recommend that you secure access to your management interface according to our \u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\\\"\u003ebest practice deployment guidelines\u003c/a\u003e.\u0026nbsp;Specifically, you should restrict management interface access to only trusted internal IP addresses.\u003c/p\u003e\u003cp\u003eReview information about how to secure management access to your Palo Alto Networks firewalls:\u003c/p\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\\\"\u003e\u003c/a\u003e\u003cul\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\\\"\u003e\u003c/a\u003e\u003cli\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\\\"\u003e\u003c/a\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\\\"\u003ePalo Alto Networks LIVEcommunity article\u003c/a\u003e\u003c/li\u003e\u003cli\u003e\u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices\\\"\u003ePalo Alto Networks official and detailed technical documentation\u003c/a\u003e\u003c/li\u003e\u003c/ul\u003e\", \"base64\": false}]}], \"x_generator\": {\"engine\": \"Vulnogram 0.1.0-dev\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Multiple cross site scripting vulnerabilities in the User-ID\\u2122 Authentication Portal (aka Captive Portal) service, GlobalProtect\\u2122 gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS\\u00ae software enables a malicious unauthenticated user to store or execute malicious JavaScript payload.\\n\\n\\nThe security risk posed by this issue is minimized when the management interface and access to the User-ID\\u2122 Authentication Portal is restricted to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\\n\\nThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\\n\\nCloud NGFW is not affected by this vulnerability.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Multiple cross site scripting vulnerabilities in the User-ID\\u2122 Authentication Portal (aka Captive Portal) service, GlobalProtect\\u2122 gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS\\u00ae software enables a malicious unauthenticated user to store or execute malicious JavaScript payload.\u003cbr\u003e\u003cp\u003e\u003cspan\u003eThe security risk posed by this issue is minimized when the management interface and access to the User-ID\\u2122 Authentication Portal is restricted to only trusted internal IP addresses according to our recommended\u003c/span\u003e \u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431\\\"\u003e\u003cspan\u003ebest practice deployment guidelines\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e.\u003cbr\u003e\u003cbr\u003e\u003c/span\u003e\u003cspan\u003eThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\u003c/span\u003e\u003cb\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/b\u003e\u003cspan\u003eCloud NGFW is not affected by this vulnerability.\u003c/span\u003e\u003cbr\u003e\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-79\", \"description\": \"CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)\"}]}], \"configurations\": [{\"lang\": \"eng\", \"value\": \"No special configuration is required to be affected by this issue.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"No special configuration is required to be affected by this issue.\", \"base64\": false}]}], \"x_affectedList\": [\"PAN-OS 12.1.7\", \"PAN-OS 12.1.6\", \"PAN-OS 12.1.5\", \"PAN-OS 12.1.4-h6\", \"PAN-OS 12.1.4-h5\", \"PAN-OS 12.1.4-h3\", \"PAN-OS 12.1.4-h2\", \"PAN-OS 12.1.4\", \"PAN-OS 12.1.3-h3\", \"PAN-OS 12.1.3-h1\", \"PAN-OS 12.1.3\", \"PAN-OS 12.1.2\", \"PAN-OS 11.2.12\", \"PAN-OS 11.2.11\", \"PAN-OS 11.2.10-h8\", \"PAN-OS 11.2.10-h7\", \"PAN-OS 11.2.10-h6\", \"PAN-OS 11.2.10-h5\", \"PAN-OS 11.2.10-h4\", \"PAN-OS 11.2.10-h3\", \"PAN-OS 11.2.10-h2\", \"PAN-OS 11.2.10-h1\", \"PAN-OS 11.2.10\", \"PAN-OS 11.2.9\", \"PAN-OS 11.2.8\", \"PAN-OS 11.2.7-h15\", \"PAN-OS 11.2.7-h14\", \"PAN-OS 11.2.7-h13\", \"PAN-OS 11.2.7-h12\", \"PAN-OS 11.2.7-h11\", \"PAN-OS 11.2.7-h10\", \"PAN-OS 11.2.7-h8\", \"PAN-OS 11.2.7-h7\", \"PAN-OS 11.2.7-h4\", \"PAN-OS 11.2.7-h3\", \"PAN-OS 11.2.7-h2\", \"PAN-OS 11.2.7-h1\", \"PAN-OS 11.2.7\", \"PAN-OS 11.2.6\", \"PAN-OS 11.2.5\", \"PAN-OS 11.2.4-h17\", \"PAN-OS 11.2.4-h15\", \"PAN-OS 11.2.4-h14\", \"PAN-OS 11.2.4-h12\", \"PAN-OS 11.2.4-h11\", \"PAN-OS 11.2.4-h10\", \"PAN-OS 11.2.4-h9\", \"PAN-OS 11.2.4-h8\", \"PAN-OS 11.2.4-h7\", \"PAN-OS 11.2.4-h6\", \"PAN-OS 11.2.4-h5\", \"PAN-OS 11.2.4-h4\", \"PAN-OS 11.2.4-h3\", \"PAN-OS 11.2.4-h2\", \"PAN-OS 11.2.4-h1\", \"PAN-OS 11.2.4\", \"PAN-OS 11.2.3-h5\", \"PAN-OS 11.2.3-h4\", \"PAN-OS 11.2.3-h3\", \"PAN-OS 11.2.3-h2\", \"PAN-OS 11.2.3-h1\", \"PAN-OS 11.2.3\", \"PAN-OS 11.2.2-h2\", \"PAN-OS 11.2.2-h1\", \"PAN-OS 11.2.1-h1\", \"PAN-OS 11.2.1\", \"PAN-OS 11.2.0-h1\", \"PAN-OS 11.2.0\", \"PAN-OS 11.1.15\", \"PAN-OS 11.1.14\", \"PAN-OS 11.1.13-h6\", \"PAN-OS 11.1.13-h5\", \"PAN-OS 11.1.13-h3\", \"PAN-OS 11.1.13-h2\", \"PAN-OS 11.1.13-h1\", \"PAN-OS 11.1.13\", \"PAN-OS 11.1.12\", \"PAN-OS 11.1.11\", \"PAN-OS 11.1.10-h26\", \"PAN-OS 11.1.10-h25\", \"PAN-OS 11.1.10-h21\", \"PAN-OS 11.1.10-h12\", \"PAN-OS 11.1.10-h10\", \"PAN-OS 11.1.10-h9\", \"PAN-OS 11.1.10-h7\", \"PAN-OS 11.1.10-h5\", \"PAN-OS 11.1.10-h4\", \"PAN-OS 11.1.10-h1\", \"PAN-OS 11.1.10\", \"PAN-OS 11.1.9\", \"PAN-OS 11.1.8\", \"PAN-OS 11.1.6-h32\", \"PAN-OS 11.1.6-h29\", \"PAN-OS 11.1.6-h25\", \"PAN-OS 11.1.6-h23\", \"PAN-OS 11.1.6-h22\", \"PAN-OS 11.1.6-h21\", \"PAN-OS 11.1.6-h20\", \"PAN-OS 11.1.6-h19\", \"PAN-OS 11.1.6-h18\", \"PAN-OS 11.1.6-h17\", \"PAN-OS 11.1.6-h14\", \"PAN-OS 11.1.6-h10\", \"PAN-OS 11.1.6-h7\", \"PAN-OS 11.1.6-h6\", \"PAN-OS 11.1.6-h4\", \"PAN-OS 11.1.6-h3\", \"PAN-OS 11.1.6-h2\", \"PAN-OS 11.1.6-h1\", \"PAN-OS 11.1.6\", \"PAN-OS 11.1.5-h1\", \"PAN-OS 11.1.5\", \"PAN-OS 11.1.4-h33\", \"PAN-OS 11.1.4-h32\", \"PAN-OS 11.1.4-h27\", \"PAN-OS 11.1.4-h25\", \"PAN-OS 11.1.4-h18\", \"PAN-OS 11.1.4-h17\", \"PAN-OS 11.1.4-h15\", \"PAN-OS 11.1.4-h13\", \"PAN-OS 11.1.4-h12\", \"PAN-OS 11.1.4-h11\", \"PAN-OS 11.1.4-h10\", \"PAN-OS 11.1.4-h9\", \"PAN-OS 11.1.4-h8\", \"PAN-OS 11.1.4-h7\", \"PAN-OS 11.1.4-h6\", \"PAN-OS 11.1.4-h5\", \"PAN-OS 11.1.4-h4\", \"PAN-OS 11.1.4-h3\", \"PAN-OS 11.1.4-h2\", \"PAN-OS 11.1.4-h1\", \"PAN-OS 11.1.4\", \"PAN-OS 11.1.3-h13\", \"PAN-OS 11.1.3-h12\", \"PAN-OS 11.1.3-h11\", \"PAN-OS 11.1.3-h10\", \"PAN-OS 11.1.3-h9\", \"PAN-OS 11.1.3-h8\", \"PAN-OS 11.1.3-h7\", \"PAN-OS 11.1.3-h6\", \"PAN-OS 11.1.3-h5\", \"PAN-OS 11.1.3-h4\", \"PAN-OS 11.1.3-h3\", \"PAN-OS 11.1.3-h2\", \"PAN-OS 11.1.3-h1\", \"PAN-OS 11.1.3\", \"PAN-OS 11.1.2-h18\", \"PAN-OS 11.1.2-h17\", \"PAN-OS 11.1.2-h16\", \"PAN-OS 11.1.2-h15\", \"PAN-OS 11.1.2-h14\", \"PAN-OS 11.1.2-h13\", \"PAN-OS 11.1.2-h12\", \"PAN-OS 11.1.2-h11\", \"PAN-OS 11.1.2-h10\", \"PAN-OS 11.1.2-h9\", \"PAN-OS 11.1.2-h8\", \"PAN-OS 11.1.2-h7\", \"PAN-OS 11.1.2-h6\", \"PAN-OS 11.1.2-h5\", \"PAN-OS 11.1.2-h4\", \"PAN-OS 11.1.2-h3\", \"PAN-OS 11.1.2-h2\", \"PAN-OS 11.1.2-h1\", \"PAN-OS 11.1.2\", \"PAN-OS 11.1.1-h2\", \"PAN-OS 11.1.1-h1\", \"PAN-OS 11.1.1\", \"PAN-OS 11.1.0-h4\", \"PAN-OS 11.1.0-h3\", \"PAN-OS 11.1.0-h2\", \"PAN-OS 11.1.0-h1\", \"PAN-OS 11.1.0\", \"PAN-OS 10.2.18-h6\", \"PAN-OS 10.2.18-h5\", \"PAN-OS 10.2.18-h1\", \"PAN-OS 10.2.18\", \"PAN-OS 10.2.17\", \"PAN-OS 10.2.16-h7\", \"PAN-OS 10.2.16-h6\", \"PAN-OS 10.2.16-h4\", \"PAN-OS 10.2.16-h1\", \"PAN-OS 10.2.16\", \"PAN-OS 10.2.15\", \"PAN-OS 10.2.14-h1\", \"PAN-OS 10.2.14\", \"PAN-OS 10.2.13-h21\", \"PAN-OS 10.2.13-h18\", \"PAN-OS 10.2.13-h16\", \"PAN-OS 10.2.13-h15\", \"PAN-OS 10.2.13-h10\", \"PAN-OS 10.2.13-h7\", \"PAN-OS 10.2.13-h5\", \"PAN-OS 10.2.13-h4\", \"PAN-OS 10.2.13-h3\", \"PAN-OS 10.2.13-h2\", \"PAN-OS 10.2.13-h1\", \"PAN-OS 10.2.13\", \"PAN-OS 10.2.12-h6\", \"PAN-OS 10.2.12-h5\", \"PAN-OS 10.2.12-h4\", \"PAN-OS 10.2.12-h3\", \"PAN-OS 10.2.12-h2\", \"PAN-OS 10.2.12-h1\", \"PAN-OS 10.2.12\", \"PAN-OS 10.2.11-h13\", \"PAN-OS 10.2.11-h12\", \"PAN-OS 10.2.11-h11\", \"PAN-OS 10.2.11-h10\", \"PAN-OS 10.2.11-h9\", \"PAN-OS 10.2.11-h8\", \"PAN-OS 10.2.11-h7\", \"PAN-OS 10.2.11-h6\", \"PAN-OS 10.2.11-h5\", \"PAN-OS 10.2.11-h4\", \"PAN-OS 10.2.11-h3\", \"PAN-OS 10.2.11-h2\", \"PAN-OS 10.2.11-h1\", \"PAN-OS 10.2.11\", \"PAN-OS 10.2.10-h36\", \"PAN-OS 10.2.10-h31\", \"PAN-OS 10.2.10-h30\", \"PAN-OS 10.2.10-h27\", \"PAN-OS 10.2.10-h26\", \"PAN-OS 10.2.10-h23\", \"PAN-OS 10.2.10-h21\", \"PAN-OS 10.2.10-h18\", \"PAN-OS 10.2.10-h17\", \"PAN-OS 10.2.10-h14\", \"PAN-OS 10.2.10-h13\", \"PAN-OS 10.2.10-h12\", \"PAN-OS 10.2.10-h11\", \"PAN-OS 10.2.10-h10\", \"PAN-OS 10.2.10-h9\", \"PAN-OS 10.2.10-h8\", \"PAN-OS 10.2.10-h7\", \"PAN-OS 10.2.10-h6\", \"PAN-OS 10.2.10-h5\", \"PAN-OS 10.2.10-h4\", \"PAN-OS 10.2.10-h3\", \"PAN-OS 10.2.10-h2\", \"PAN-OS 10.2.10-h1\", \"PAN-OS 10.2.10\", \"PAN-OS 10.2.9-h21\", \"PAN-OS 10.2.9-h20\", \"PAN-OS 10.2.9-h19\", \"PAN-OS 10.2.9-h18\", \"PAN-OS 10.2.9-h17\", \"PAN-OS 10.2.9-h16\", \"PAN-OS 10.2.9-h15\", \"PAN-OS 10.2.9-h14\", \"PAN-OS 10.2.9-h13\", \"PAN-OS 10.2.9-h12\", \"PAN-OS 10.2.9-h11\", \"PAN-OS 10.2.9-h10\", \"PAN-OS 10.2.9-h9\", \"PAN-OS 10.2.9-h8\", \"PAN-OS 10.2.9-h7\", \"PAN-OS 10.2.9-h6\", \"PAN-OS 10.2.9-h5\", \"PAN-OS 10.2.9-h4\", \"PAN-OS 10.2.9-h3\", \"PAN-OS 10.2.9-h2\", \"PAN-OS 10.2.9-h1\", \"PAN-OS 10.2.9\", \"PAN-OS 10.2.8-h21\", \"PAN-OS 10.2.8-h20\", \"PAN-OS 10.2.8-h19\", \"PAN-OS 10.2.8-h18\", \"PAN-OS 10.2.8-h17\", \"PAN-OS 10.2.8-h16\", \"PAN-OS 10.2.8-h15\", \"PAN-OS 10.2.8-h14\", \"PAN-OS 10.2.8-h13\", \"PAN-OS 10.2.8-h12\", \"PAN-OS 10.2.8-h11\", \"PAN-OS 10.2.8-h10\", \"PAN-OS 10.2.8-h9\", \"PAN-OS 10.2.8-h8\", \"PAN-OS 10.2.8-h7\", \"PAN-OS 10.2.8-h6\", \"PAN-OS 10.2.8-h5\", \"PAN-OS 10.2.8-h4\", \"PAN-OS 10.2.8-h3\", \"PAN-OS 10.2.8-h2\", \"PAN-OS 10.2.8-h1\", \"PAN-OS 10.2.8\", \"PAN-OS 10.2.7-h34\", \"PAN-OS 10.2.7-h32\", \"PAN-OS 10.2.7-h24\", \"PAN-OS 10.2.7-h23\", \"PAN-OS 10.2.7-h22\", \"PAN-OS 10.2.7-h21\", \"PAN-OS 10.2.7-h20\", \"PAN-OS 10.2.7-h19\", \"PAN-OS 10.2.7-h18\", \"PAN-OS 10.2.7-h17\", \"PAN-OS 10.2.7-h16\", \"PAN-OS 10.2.7-h15\", \"PAN-OS 10.2.7-h14\", \"PAN-OS 10.2.7-h13\", \"PAN-OS 10.2.7-h12\", \"PAN-OS 10.2.7-h11\", \"PAN-OS 10.2.7-h10\", \"PAN-OS 10.2.7-h9\", \"PAN-OS 10.2.7-h8\", \"PAN-OS 10.2.7-h7\", \"PAN-OS 10.2.7-h6\", \"PAN-OS 10.2.7-h5\", \"PAN-OS 10.2.7-h4\", \"PAN-OS 10.2.7-h3\", \"PAN-OS 10.2.7-h2\", \"PAN-OS 10.2.7-h1\", \"PAN-OS 10.2.7\", \"PAN-OS 10.2.6-h6\", \"PAN-OS 10.2.6-h5\", \"PAN-OS 10.2.6-h4\", \"PAN-OS 10.2.6-h3\", \"PAN-OS 10.2.6-h2\", \"PAN-OS 10.2.6-h1\", \"PAN-OS 10.2.6\", \"PAN-OS 10.2.5-h9\", \"PAN-OS 10.2.5-h8\", \"PAN-OS 10.2.5-h7\", \"PAN-OS 10.2.5-h6\", \"PAN-OS 10.2.5-h5\", \"PAN-OS 10.2.5-h4\", \"PAN-OS 10.2.5-h3\", \"PAN-OS 10.2.5-h2\", \"PAN-OS 10.2.5-h1\", \"PAN-OS 10.2.5\", \"PAN-OS 10.2.4-h32\", \"PAN-OS 10.2.4-h31\", \"PAN-OS 10.2.4-h30\", \"PAN-OS 10.2.4-h29\", \"PAN-OS 10.2.4-h28\", \"PAN-OS 10.2.4-h27\", \"PAN-OS 10.2.4-h26\", \"PAN-OS 10.2.4-h25\", \"PAN-OS 10.2.4-h24\", \"PAN-OS 10.2.4-h23\", \"PAN-OS 10.2.4-h22\", \"PAN-OS 10.2.4-h21\", \"PAN-OS 10.2.4-h20\", \"PAN-OS 10.2.4-h19\", \"PAN-OS 10.2.4-h18\", \"PAN-OS 10.2.4-h17\", \"PAN-OS 10.2.4-h16\", \"PAN-OS 10.2.4-h15\", \"PAN-OS 10.2.4-h14\", \"PAN-OS 10.2.4-h13\", \"PAN-OS 10.2.4-h12\", \"PAN-OS 10.2.4-h11\", \"PAN-OS 10.2.4-h10\", \"PAN-OS 10.2.4-h9\", \"PAN-OS 10.2.4-h8\", \"PAN-OS 10.2.4-h7\", \"PAN-OS 10.2.4-h6\", \"PAN-OS 10.2.4-h5\", \"PAN-OS 10.2.4-h4\", \"PAN-OS 10.2.4-h3\", \"PAN-OS 10.2.4-h2\", \"PAN-OS 10.2.4-h1\", \"PAN-OS 10.2.4\", \"PAN-OS 10.2.3-h14\", \"PAN-OS 10.2.3-h13\", \"PAN-OS 10.2.3-h12\", \"PAN-OS 10.2.3-h11\", \"PAN-OS 10.2.3-h10\", \"PAN-OS 10.2.3-h9\", \"PAN-OS 10.2.3-h8\", \"PAN-OS 10.2.3-h7\", \"PAN-OS 10.2.3-h6\", \"PAN-OS 10.2.3-h5\", \"PAN-OS 10.2.3-h4\", \"PAN-OS 10.2.3-h3\", \"PAN-OS 10.2.3-h2\", \"PAN-OS 10.2.3-h1\", \"PAN-OS 10.2.3\", \"PAN-OS 10.2.2-h6\", \"PAN-OS 10.2.2-h5\", \"PAN-OS 10.2.2-h4\", \"PAN-OS 10.2.2-h3\", \"PAN-OS 10.2.2-h2\", \"PAN-OS 10.2.2-h1\", \"PAN-OS 10.2.2\", \"PAN-OS 10.2.1-h3\", \"PAN-OS 10.2.1-h2\", \"PAN-OS 10.2.1-h1\", \"PAN-OS 10.2.1\", \"PAN-OS 10.2.0-h4\", \"PAN-OS 10.2.0-h3\", \"PAN-OS 10.2.0-h2\", \"PAN-OS 10.2.0-h1\", \"PAN-OS 10.2.0\"], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"12.1.8\", \"versionStartIncluding\": \"12.1.0\"}, {\"criteria\": \"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"11.2.13\", \"versionStartIncluding\": \"11.2.0\"}, {\"criteria\": \"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"11.1.16\", \"versionStartIncluding\": \"11.1.0\"}, {\"criteria\": \"cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"10.2.0\"}], \"operator\": \"OR\"}, {\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"12.1.8\", \"versionStartIncluding\": \"12.1.0\"}, {\"criteria\": \"cpe:2.3:o:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"11.2.0\"}, {\"criteria\": \"cpe:2.3:o:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"10.2.0\"}], \"operator\": \"OR\"}], \"operator\": \"OR\"}], \"providerMetadata\": {\"orgId\": \"d6c1279f-00f6-4ef7-9217-f89ffe703ec0\", \"shortName\": \"palo_alto\", \"dateUpdated\": \"2026-07-09T19:08:41.656Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-0279\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-09T19:23:42.200Z\", \"dateReserved\": \"2025-11-03T20:44:38.280Z\", \"assignerOrgId\": \"d6c1279f-00f6-4ef7-9217-f89ffe703ec0\", \"datePublished\": \"2026-07-09T19:08:41.656Z\", \"assignerShortName\": \"palo_alto\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-0853

Vulnerability from certfr_avis - Published: 2026-07-09 - Updated: 2026-07-09

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Palo Alto Networks	Prisma Access Browser	Prisma Access versions 11.2.x antérieures à 11.2.7-h18
Palo Alto Networks	PAN-OS	PAN-OS versions 11.2.x antérieures à 11.2.13
Palo Alto Networks	Prisma Access Browser	Prisma Browser versions antérieures à 150.33.2.46
Palo Alto Networks	Prisma Access Browser	Prisma Access versions 10.2.x antérieures à 10.2.10-h39
Palo Alto Networks	Prisma Access Browser	Prisma Access versions 12.1.x antérieures à 12.1.8
Palo Alto Networks	Prisma Access Browser	Prisma Access Agent sans les derniers correctifs de sécurité
Palo Alto Networks	PAN-OS	PAN-OS versions 12.1.x antérieures à 12.1.8
Palo Alto Networks	PAN-OS	PAN-OS versions 11.1.0 antérieures à 11.1.4-h35
Palo Alto Networks	Cortex XDR Broker	Cortex XDR Broker VM versions 20.0.96 antérieures à 31.0.58
Palo Alto Networks	PAN-OS	PAN-OS versions 10.2.0 antérieures à 10.2.18-h8
Palo Alto Networks	PAN-OS	PAN-OS versions 11.1.x antérieures à 11.1.16

References

Title

Publication Time

Tags

Bulletin de sécurité Palo Alto Networks CVE-2026-0276	2026-07-08	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0285	2026-07-08	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0277	2026-07-08	vendor-advisory
Bulletin de sécurité Palo Alto Networks PAN-SA-2026-0010	2026-07-08	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0286	2026-07-08	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0282	2026-07-08	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0279	2026-07-08	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0280	2026-07-08	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0278	2026-07-08	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0288	2026-07-08	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0287	2026-07-08	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0281	2026-07-08	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0284	2026-07-08	vendor-advisory
Bulletin de sécurité Palo Alto Networks CVE-2026-0283	2026-07-08	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Prisma Access versions 11.2.x ant\u00e9rieures \u00e0 11.2.7-h18",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.2.x ant\u00e9rieures \u00e0 11.2.13",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Browser versions ant\u00e9rieures \u00e0 150.33.2.46",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Access versions 10.2.x ant\u00e9rieures \u00e0 10.2.10-h39",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Access versions 12.1.x ant\u00e9rieures \u00e0 12.1.8",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Prisma Access Agent sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "Prisma Access Browser",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 12.1.x ant\u00e9rieures \u00e0 12.1.8",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.1.0 ant\u00e9rieures \u00e0 11.1.4-h35",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Cortex XDR Broker VM versions 20.0.96 ant\u00e9rieures \u00e0 31.0.58",
      "product": {
        "name": "Cortex XDR Broker",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 10.2.0 ant\u00e9rieures \u00e0 10.2.18-h8",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    },
    {
      "description": "PAN-OS versions 11.1.x ant\u00e9rieures \u00e0 11.1.16",
      "product": {
        "name": "PAN-OS",
        "vendor": {
          "name": "Palo Alto Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-10927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10927"
    },
    {
      "name": "CVE-2026-10991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10991"
    },
    {
      "name": "CVE-2026-11637",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11637"
    },
    {
      "name": "CVE-2026-11239",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11239"
    },
    {
      "name": "CVE-2026-11182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11182"
    },
    {
      "name": "CVE-2026-10986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10986"
    },
    {
      "name": "CVE-2026-10955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10955"
    },
    {
      "name": "CVE-2026-11144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11144"
    },
    {
      "name": "CVE-2026-0281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0281"
    },
    {
      "name": "CVE-2026-11041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11041"
    },
    {
      "name": "CVE-2026-10902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10902"
    },
    {
      "name": "CVE-2026-11047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11047"
    },
    {
      "name": "CVE-2026-10892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10892"
    },
    {
      "name": "CVE-2026-11153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11153"
    },
    {
      "name": "CVE-2026-11221",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11221"
    },
    {
      "name": "CVE-2026-0283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0283"
    },
    {
      "name": "CVE-2026-10981",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10981"
    },
    {
      "name": "CVE-2026-10958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10958"
    },
    {
      "name": "CVE-2026-11693",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11693"
    },
    {
      "name": "CVE-2026-10967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10967"
    },
    {
      "name": "CVE-2026-11229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11229"
    },
    {
      "name": "CVE-2026-11057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11057"
    },
    {
      "name": "CVE-2026-11139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11139"
    },
    {
      "name": "CVE-2026-11204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11204"
    },
    {
      "name": "CVE-2026-11175",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11175"
    },
    {
      "name": "CVE-2026-11023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11023"
    },
    {
      "name": "CVE-2026-11250",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11250"
    },
    {
      "name": "CVE-2026-10968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10968"
    },
    {
      "name": "CVE-2026-10896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10896"
    },
    {
      "name": "CVE-2026-11071",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11071"
    },
    {
      "name": "CVE-2026-11238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11238"
    },
    {
      "name": "CVE-2026-11274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11274"
    },
    {
      "name": "CVE-2026-11200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11200"
    },
    {
      "name": "CVE-2026-10915",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10915"
    },
    {
      "name": "CVE-2026-11257",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11257"
    },
    {
      "name": "CVE-2026-11011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11011"
    },
    {
      "name": "CVE-2026-11049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11049"
    },
    {
      "name": "CVE-2026-12031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12031"
    },
    {
      "name": "CVE-2026-10923",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10923"
    },
    {
      "name": "CVE-2026-11070",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11070"
    },
    {
      "name": "CVE-2026-11101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11101"
    },
    {
      "name": "CVE-2026-10946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10946"
    },
    {
      "name": "CVE-2026-11016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11016"
    },
    {
      "name": "CVE-2026-11236",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11236"
    },
    {
      "name": "CVE-2026-11108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11108"
    },
    {
      "name": "CVE-2026-10912",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10912"
    },
    {
      "name": "CVE-2026-11098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11098"
    },
    {
      "name": "CVE-2026-11086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11086"
    },
    {
      "name": "CVE-2026-11122",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11122"
    },
    {
      "name": "CVE-2026-11267",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11267"
    },
    {
      "name": "CVE-2026-11279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11279"
    },
    {
      "name": "CVE-2026-11668",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11668"
    },
    {
      "name": "CVE-2026-12019",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12019"
    },
    {
      "name": "CVE-2026-10911",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10911"
    },
    {
      "name": "CVE-2026-10944",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10944"
    },
    {
      "name": "CVE-2026-10922",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10922"
    },
    {
      "name": "CVE-2026-11189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11189"
    },
    {
      "name": "CVE-2026-11044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11044"
    },
    {
      "name": "CVE-2026-10995",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10995"
    },
    {
      "name": "CVE-2026-11186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11186"
    },
    {
      "name": "CVE-2026-11309",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11309"
    },
    {
      "name": "CVE-2026-10898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10898"
    },
    {
      "name": "CVE-2026-11235",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11235"
    },
    {
      "name": "CVE-2026-11007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11007"
    },
    {
      "name": "CVE-2026-10883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10883"
    },
    {
      "name": "CVE-2026-11036",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11036"
    },
    {
      "name": "CVE-2026-11673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11673"
    },
    {
      "name": "CVE-2026-11290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11290"
    },
    {
      "name": "CVE-2026-11262",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11262"
    },
    {
      "name": "CVE-2026-11075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11075"
    },
    {
      "name": "CVE-2026-10887",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10887"
    },
    {
      "name": "CVE-2026-11263",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11263"
    },
    {
      "name": "CVE-2026-10996",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10996"
    },
    {
      "name": "CVE-2026-11280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11280"
    },
    {
      "name": "CVE-2026-11133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11133"
    },
    {
      "name": "CVE-2026-10979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10979"
    },
    {
      "name": "CVE-2026-11640",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11640"
    },
    {
      "name": "CVE-2026-11134",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11134"
    },
    {
      "name": "CVE-2026-10920",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10920"
    },
    {
      "name": "CVE-2026-11687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11687"
    },
    {
      "name": "CVE-2026-11150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11150"
    },
    {
      "name": "CVE-2026-11038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11038"
    },
    {
      "name": "CVE-2026-11135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11135"
    },
    {
      "name": "CVE-2026-11652",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11652"
    },
    {
      "name": "CVE-2026-11024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11024"
    },
    {
      "name": "CVE-2026-10891",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10891"
    },
    {
      "name": "CVE-2026-0286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0286"
    },
    {
      "name": "CVE-2026-11195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11195"
    },
    {
      "name": "CVE-2026-10974",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10974"
    },
    {
      "name": "CVE-2026-12035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12035"
    },
    {
      "name": "CVE-2026-11003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11003"
    },
    {
      "name": "CVE-2026-12014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12014"
    },
    {
      "name": "CVE-2026-10987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10987"
    },
    {
      "name": "CVE-2026-11696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11696"
    },
    {
      "name": "CVE-2026-11222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11222"
    },
    {
      "name": "CVE-2026-10957",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10957"
    },
    {
      "name": "CVE-2026-11666",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11666"
    },
    {
      "name": "CVE-2026-10971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10971"
    },
    {
      "name": "CVE-2026-10949",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10949"
    },
    {
      "name": "CVE-2026-11256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11256"
    },
    {
      "name": "CVE-2026-11663",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11663"
    },
    {
      "name": "CVE-2026-10941",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10941"
    },
    {
      "name": "CVE-2026-11226",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11226"
    },
    {
      "name": "CVE-2026-10928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10928"
    },
    {
      "name": "CVE-2026-11169",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11169"
    },
    {
      "name": "CVE-2026-11009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11009"
    },
    {
      "name": "CVE-2026-12016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12016"
    },
    {
      "name": "CVE-2026-10921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10921"
    },
    {
      "name": "CVE-2026-11307",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11307"
    },
    {
      "name": "CVE-2026-12027",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12027"
    },
    {
      "name": "CVE-2026-11628",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11628"
    },
    {
      "name": "CVE-2026-10975",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10975"
    },
    {
      "name": "CVE-2026-10909",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10909"
    },
    {
      "name": "CVE-2026-11127",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11127"
    },
    {
      "name": "CVE-2026-11125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11125"
    },
    {
      "name": "CVE-2026-11177",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11177"
    },
    {
      "name": "CVE-2026-11302",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11302"
    },
    {
      "name": "CVE-2026-11171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11171"
    },
    {
      "name": "CVE-2026-12013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12013"
    },
    {
      "name": "CVE-2026-11661",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11661"
    },
    {
      "name": "CVE-2026-11168",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11168"
    },
    {
      "name": "CVE-2026-11022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11022"
    },
    {
      "name": "CVE-2026-11126",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11126"
    },
    {
      "name": "CVE-2026-11161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11161"
    },
    {
      "name": "CVE-2026-11639",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11639"
    },
    {
      "name": "CVE-2026-10903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10903"
    },
    {
      "name": "CVE-2026-10893",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10893"
    },
    {
      "name": "CVE-2026-0276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0276"
    },
    {
      "name": "CVE-2026-11265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11265"
    },
    {
      "name": "CVE-2026-11268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11268"
    },
    {
      "name": "CVE-2026-11634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11634"
    },
    {
      "name": "CVE-2026-0284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0284"
    },
    {
      "name": "CVE-2026-11288",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11288"
    },
    {
      "name": "CVE-2026-11228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11228"
    },
    {
      "name": "CVE-2026-11686",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11686"
    },
    {
      "name": "CVE-2026-11158",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11158"
    },
    {
      "name": "CVE-2026-11234",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11234"
    },
    {
      "name": "CVE-2026-11291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11291"
    },
    {
      "name": "CVE-2026-11155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11155"
    },
    {
      "name": "CVE-2026-11241",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11241"
    },
    {
      "name": "CVE-2026-10953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10953"
    },
    {
      "name": "CVE-2026-11690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11690"
    },
    {
      "name": "CVE-2026-12009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12009"
    },
    {
      "name": "CVE-2026-11216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11216"
    },
    {
      "name": "CVE-2026-11119",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11119"
    },
    {
      "name": "CVE-2026-11285",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11285"
    },
    {
      "name": "CVE-2026-11019",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11019"
    },
    {
      "name": "CVE-2026-11063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11063"
    },
    {
      "name": "CVE-2026-11090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11090"
    },
    {
      "name": "CVE-2026-10939",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10939"
    },
    {
      "name": "CVE-2026-11205",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11205"
    },
    {
      "name": "CVE-2026-11248",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11248"
    },
    {
      "name": "CVE-2026-11013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11013"
    },
    {
      "name": "CVE-2026-11030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11030"
    },
    {
      "name": "CVE-2026-11650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11650"
    },
    {
      "name": "CVE-2026-11188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11188"
    },
    {
      "name": "CVE-2026-11045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11045"
    },
    {
      "name": "CVE-2026-11670",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11670"
    },
    {
      "name": "CVE-2026-11006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11006"
    },
    {
      "name": "CVE-2026-11232",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11232"
    },
    {
      "name": "CVE-2026-10904",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10904"
    },
    {
      "name": "CVE-2026-11202",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11202"
    },
    {
      "name": "CVE-2026-10977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10977"
    },
    {
      "name": "CVE-2026-11214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11214"
    },
    {
      "name": "CVE-2026-11651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11651"
    },
    {
      "name": "CVE-2026-11129",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11129"
    },
    {
      "name": "CVE-2026-12018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12018"
    },
    {
      "name": "CVE-2026-11021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11021"
    },
    {
      "name": "CVE-2026-11665",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11665"
    },
    {
      "name": "CVE-2026-10947",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10947"
    },
    {
      "name": "CVE-2026-11160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11160"
    },
    {
      "name": "CVE-2026-0279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0279"
    },
    {
      "name": "CVE-2026-10956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10956"
    },
    {
      "name": "CVE-2026-10935",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10935"
    },
    {
      "name": "CVE-2026-11635",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11635"
    },
    {
      "name": "CVE-2026-11050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11050"
    },
    {
      "name": "CVE-2026-11069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11069"
    },
    {
      "name": "CVE-2026-11034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11034"
    },
    {
      "name": "CVE-2026-11305",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11305"
    },
    {
      "name": "CVE-2026-12034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12034"
    },
    {
      "name": "CVE-2026-11259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11259"
    },
    {
      "name": "CVE-2026-11193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11193"
    },
    {
      "name": "CVE-2026-11026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11026"
    },
    {
      "name": "CVE-2026-11662",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11662"
    },
    {
      "name": "CVE-2026-11094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11094"
    },
    {
      "name": "CVE-2026-11692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11692"
    },
    {
      "name": "CVE-2026-11237",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11237"
    },
    {
      "name": "CVE-2026-11104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11104"
    },
    {
      "name": "CVE-2026-11281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11281"
    },
    {
      "name": "CVE-2026-11093",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11093"
    },
    {
      "name": "CVE-2026-11080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11080"
    },
    {
      "name": "CVE-2026-11143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11143"
    },
    {
      "name": "CVE-2026-10924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10924"
    },
    {
      "name": "CVE-2026-11653",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11653"
    },
    {
      "name": "CVE-2026-11181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11181"
    },
    {
      "name": "CVE-2026-12024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12024"
    },
    {
      "name": "CVE-2026-11061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11061"
    },
    {
      "name": "CVE-2026-11684",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11684"
    },
    {
      "name": "CVE-2026-10885",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10885"
    },
    {
      "name": "CVE-2026-11292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11292"
    },
    {
      "name": "CVE-2026-11058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11058"
    },
    {
      "name": "CVE-2026-11032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11032"
    },
    {
      "name": "CVE-2026-10994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10994"
    },
    {
      "name": "CVE-2026-11163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11163"
    },
    {
      "name": "CVE-2026-12029",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12029"
    },
    {
      "name": "CVE-2026-11682",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11682"
    },
    {
      "name": "CVE-2026-11672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11672"
    },
    {
      "name": "CVE-2026-11676",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11676"
    },
    {
      "name": "CVE-2026-11105",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11105"
    },
    {
      "name": "CVE-2026-11689",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11689"
    },
    {
      "name": "CVE-2026-11147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11147"
    },
    {
      "name": "CVE-2026-11247",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11247"
    },
    {
      "name": "CVE-2026-11266",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11266"
    },
    {
      "name": "CVE-2026-11253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11253"
    },
    {
      "name": "CVE-2026-11187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11187"
    },
    {
      "name": "CVE-2026-11272",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11272"
    },
    {
      "name": "CVE-2026-11005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11005"
    },
    {
      "name": "CVE-2026-10914",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10914"
    },
    {
      "name": "CVE-2026-11029",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11029"
    },
    {
      "name": "CVE-2026-11206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11206"
    },
    {
      "name": "CVE-2026-11167",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11167"
    },
    {
      "name": "CVE-2026-11001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11001"
    },
    {
      "name": "CVE-2026-11203",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11203"
    },
    {
      "name": "CVE-2026-10988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10988"
    },
    {
      "name": "CVE-2026-11301",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11301"
    },
    {
      "name": "CVE-2026-11010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11010"
    },
    {
      "name": "CVE-2026-11636",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11636"
    },
    {
      "name": "CVE-2026-11212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11212"
    },
    {
      "name": "CVE-2026-11190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11190"
    },
    {
      "name": "CVE-2026-11289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11289"
    },
    {
      "name": "CVE-2026-11215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11215"
    },
    {
      "name": "CVE-2026-11294",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11294"
    },
    {
      "name": "CVE-2026-11254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11254"
    },
    {
      "name": "CVE-2026-11649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11649"
    },
    {
      "name": "CVE-2026-11076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11076"
    },
    {
      "name": "CVE-2026-11020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11020"
    },
    {
      "name": "CVE-2026-11065",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11065"
    },
    {
      "name": "CVE-2026-11219",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11219"
    },
    {
      "name": "CVE-2026-10895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10895"
    },
    {
      "name": "CVE-2026-11074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11074"
    },
    {
      "name": "CVE-2026-10918",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10918"
    },
    {
      "name": "CVE-2026-12007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12007"
    },
    {
      "name": "CVE-2026-0280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0280"
    },
    {
      "name": "CVE-2026-11042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11042"
    },
    {
      "name": "CVE-2026-11246",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11246"
    },
    {
      "name": "CVE-2026-11118",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11118"
    },
    {
      "name": "CVE-2026-11141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11141"
    },
    {
      "name": "CVE-2026-11157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11157"
    },
    {
      "name": "CVE-2026-11087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11087"
    },
    {
      "name": "CVE-2026-11109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11109"
    },
    {
      "name": "CVE-2026-11631",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11631"
    },
    {
      "name": "CVE-2026-11245",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11245"
    },
    {
      "name": "CVE-2026-12028",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12028"
    },
    {
      "name": "CVE-2026-10925",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10925"
    },
    {
      "name": "CVE-2026-12015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12015"
    },
    {
      "name": "CVE-2026-11110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11110"
    },
    {
      "name": "CVE-2026-11646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11646"
    },
    {
      "name": "CVE-2026-10929",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10929"
    },
    {
      "name": "CVE-2026-10961",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10961"
    },
    {
      "name": "CVE-2026-11121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11121"
    },
    {
      "name": "CVE-2026-11260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11260"
    },
    {
      "name": "CVE-2026-11111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11111"
    },
    {
      "name": "CVE-2026-11271",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11271"
    },
    {
      "name": "CVE-2026-11658",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11658"
    },
    {
      "name": "CVE-2026-11112",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11112"
    },
    {
      "name": "CVE-2026-11037",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11037"
    },
    {
      "name": "CVE-2026-11128",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11128"
    },
    {
      "name": "CVE-2026-11284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11284"
    },
    {
      "name": "CVE-2026-11683",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11683"
    },
    {
      "name": "CVE-2026-11688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11688"
    },
    {
      "name": "CVE-2026-11694",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11694"
    },
    {
      "name": "CVE-2026-10954",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10954"
    },
    {
      "name": "CVE-2026-10937",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10937"
    },
    {
      "name": "CVE-2026-11685",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11685"
    },
    {
      "name": "CVE-2026-11131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11131"
    },
    {
      "name": "CVE-2026-11079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11079"
    },
    {
      "name": "CVE-2026-11162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11162"
    },
    {
      "name": "CVE-2026-10942",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10942"
    },
    {
      "name": "CVE-2026-11629",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11629"
    },
    {
      "name": "CVE-2026-11018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11018"
    },
    {
      "name": "CVE-2026-11148",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11148"
    },
    {
      "name": "CVE-2026-12017",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12017"
    },
    {
      "name": "CVE-2026-11240",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11240"
    },
    {
      "name": "CVE-2026-10894",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10894"
    },
    {
      "name": "CVE-2026-11277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11277"
    },
    {
      "name": "CVE-2026-11130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11130"
    },
    {
      "name": "CVE-2026-10938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10938"
    },
    {
      "name": "CVE-2026-11084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11084"
    },
    {
      "name": "CVE-2026-11297",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11297"
    },
    {
      "name": "CVE-2026-11264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11264"
    },
    {
      "name": "CVE-2026-11306",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11306"
    },
    {
      "name": "CVE-2026-10972",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10972"
    },
    {
      "name": "CVE-2026-11113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11113"
    },
    {
      "name": "CVE-2026-11648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11648"
    },
    {
      "name": "CVE-2026-11691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11691"
    },
    {
      "name": "CVE-2026-11681",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11681"
    },
    {
      "name": "CVE-2026-10965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10965"
    },
    {
      "name": "CVE-2026-11296",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11296"
    },
    {
      "name": "CVE-2026-11192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11192"
    },
    {
      "name": "CVE-2026-11008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11008"
    },
    {
      "name": "CVE-2026-11082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11082"
    },
    {
      "name": "CVE-2026-11123",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11123"
    },
    {
      "name": "CVE-2026-11000",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11000"
    },
    {
      "name": "CVE-2026-11103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11103"
    },
    {
      "name": "CVE-2026-11286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11286"
    },
    {
      "name": "CVE-2026-10993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10993"
    },
    {
      "name": "CVE-2026-10959",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10959"
    },
    {
      "name": "CVE-2026-11172",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11172"
    },
    {
      "name": "CVE-2026-10913",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10913"
    },
    {
      "name": "CVE-2026-11146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11146"
    },
    {
      "name": "CVE-2026-10884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10884"
    },
    {
      "name": "CVE-2026-0287",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0287"
    },
    {
      "name": "CVE-2026-10980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10980"
    },
    {
      "name": "CVE-2026-10910",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10910"
    },
    {
      "name": "CVE-2026-11077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11077"
    },
    {
      "name": "CVE-2026-11116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11116"
    },
    {
      "name": "CVE-2026-11137",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11137"
    },
    {
      "name": "CVE-2026-11638",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11638"
    },
    {
      "name": "CVE-2026-11278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11278"
    },
    {
      "name": "CVE-2026-11174",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11174"
    },
    {
      "name": "CVE-2026-10905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10905"
    },
    {
      "name": "CVE-2026-11056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11056"
    },
    {
      "name": "CVE-2026-0285",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0285"
    },
    {
      "name": "CVE-2026-11224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11224"
    },
    {
      "name": "CVE-2026-11138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11138"
    },
    {
      "name": "CVE-2026-12008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12008"
    },
    {
      "name": "CVE-2026-10908",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10908"
    },
    {
      "name": "CVE-2026-11293",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11293"
    },
    {
      "name": "CVE-2026-11060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11060"
    },
    {
      "name": "CVE-2026-11142",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11142"
    },
    {
      "name": "CVE-2026-10969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10969"
    },
    {
      "name": "CVE-2026-10930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10930"
    },
    {
      "name": "CVE-2026-11642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11642"
    },
    {
      "name": "CVE-2026-11152",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11152"
    },
    {
      "name": "CVE-2026-11165",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11165"
    },
    {
      "name": "CVE-2026-11051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11051"
    },
    {
      "name": "CVE-2026-11304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11304"
    },
    {
      "name": "CVE-2026-10999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10999"
    },
    {
      "name": "CVE-2026-11282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11282"
    },
    {
      "name": "CVE-2026-10888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10888"
    },
    {
      "name": "CVE-2026-11095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11095"
    },
    {
      "name": "CVE-2026-11055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11055"
    },
    {
      "name": "CVE-2026-11217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11217"
    },
    {
      "name": "CVE-2026-10907",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10907"
    },
    {
      "name": "CVE-2026-11276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11276"
    },
    {
      "name": "CVE-2026-11633",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11633"
    },
    {
      "name": "CVE-2026-11156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11156"
    },
    {
      "name": "CVE-2026-11031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11031"
    },
    {
      "name": "CVE-2026-10952",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10952"
    },
    {
      "name": "CVE-2026-12032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12032"
    },
    {
      "name": "CVE-2026-11184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11184"
    },
    {
      "name": "CVE-2026-11680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11680"
    },
    {
      "name": "CVE-2026-10900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10900"
    },
    {
      "name": "CVE-2026-10962",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10962"
    },
    {
      "name": "CVE-2026-10966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10966"
    },
    {
      "name": "CVE-2026-11170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11170"
    },
    {
      "name": "CVE-2026-11632",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11632"
    },
    {
      "name": "CVE-2026-10943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10943"
    },
    {
      "name": "CVE-2026-11166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11166"
    },
    {
      "name": "CVE-2026-10964",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10964"
    },
    {
      "name": "CVE-2026-11100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11100"
    },
    {
      "name": "CVE-2026-10992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10992"
    },
    {
      "name": "CVE-2026-11695",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11695"
    },
    {
      "name": "CVE-2026-11647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11647"
    },
    {
      "name": "CVE-2026-10916",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10916"
    },
    {
      "name": "CVE-2026-11085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11085"
    },
    {
      "name": "CVE-2026-11645",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11645"
    },
    {
      "name": "CVE-2026-11096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11096"
    },
    {
      "name": "CVE-2026-11178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11178"
    },
    {
      "name": "CVE-2026-11275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11275"
    },
    {
      "name": "CVE-2026-11046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11046"
    },
    {
      "name": "CVE-2026-11028",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11028"
    },
    {
      "name": "CVE-2026-11176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11176"
    },
    {
      "name": "CVE-2026-11068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11068"
    },
    {
      "name": "CVE-2026-10940",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10940"
    },
    {
      "name": "CVE-2026-12023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12023"
    },
    {
      "name": "CVE-2026-10936",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10936"
    },
    {
      "name": "CVE-2026-10886",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10886"
    },
    {
      "name": "CVE-2026-12012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12012"
    },
    {
      "name": "CVE-2026-10917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10917"
    },
    {
      "name": "CVE-2026-11191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11191"
    },
    {
      "name": "CVE-2026-11674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11674"
    },
    {
      "name": "CVE-2026-11154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11154"
    },
    {
      "name": "CVE-2026-12025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12025"
    },
    {
      "name": "CVE-2026-11180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11180"
    },
    {
      "name": "CVE-2026-11699",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11699"
    },
    {
      "name": "CVE-2026-10882",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10882"
    },
    {
      "name": "CVE-2026-12026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12026"
    },
    {
      "name": "CVE-2026-10901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10901"
    },
    {
      "name": "CVE-2026-11308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11308"
    },
    {
      "name": "CVE-2026-11697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11697"
    },
    {
      "name": "CVE-2026-11655",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11655"
    },
    {
      "name": "CVE-2026-11132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11132"
    },
    {
      "name": "CVE-2026-11677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11677"
    },
    {
      "name": "CVE-2026-11261",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11261"
    },
    {
      "name": "CVE-2026-11197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11197"
    },
    {
      "name": "CVE-2026-11300",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11300"
    },
    {
      "name": "CVE-2026-10899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10899"
    },
    {
      "name": "CVE-2026-10998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10998"
    },
    {
      "name": "CVE-2026-11064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11064"
    },
    {
      "name": "CVE-2026-11017",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11017"
    },
    {
      "name": "CVE-2026-11207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11207"
    },
    {
      "name": "CVE-2026-11303",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11303"
    },
    {
      "name": "CVE-2026-11295",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11295"
    },
    {
      "name": "CVE-2026-11106",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11106"
    },
    {
      "name": "CVE-2026-10932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10932"
    },
    {
      "name": "CVE-2026-11660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11660"
    },
    {
      "name": "CVE-2026-11231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11231"
    },
    {
      "name": "CVE-2026-11117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11117"
    },
    {
      "name": "CVE-2026-12022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12022"
    },
    {
      "name": "CVE-2026-11641",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11641"
    },
    {
      "name": "CVE-2026-10906",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10906"
    },
    {
      "name": "CVE-2026-11643",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11643"
    },
    {
      "name": "CVE-2026-11194",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11194"
    },
    {
      "name": "CVE-2026-0288",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0288"
    },
    {
      "name": "CVE-2026-11700",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11700"
    },
    {
      "name": "CVE-2026-11004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11004"
    },
    {
      "name": "CVE-2026-11081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11081"
    },
    {
      "name": "CVE-2026-11179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11179"
    },
    {
      "name": "CVE-2026-11033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11033"
    },
    {
      "name": "CVE-2026-11173",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11173"
    },
    {
      "name": "CVE-2026-0275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0275"
    },
    {
      "name": "CVE-2026-11669",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11669"
    },
    {
      "name": "CVE-2026-10970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10970"
    },
    {
      "name": "CVE-2026-11230",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11230"
    },
    {
      "name": "CVE-2026-11114",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11114"
    },
    {
      "name": "CVE-2026-10976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10976"
    },
    {
      "name": "CVE-2026-12010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12010"
    },
    {
      "name": "CVE-2026-11258",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11258"
    },
    {
      "name": "CVE-2026-11107",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11107"
    },
    {
      "name": "CVE-2026-10983",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10983"
    },
    {
      "name": "CVE-2026-11066",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11066"
    },
    {
      "name": "CVE-2026-11120",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11120"
    },
    {
      "name": "CVE-2026-11225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11225"
    },
    {
      "name": "CVE-2026-11062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11062"
    },
    {
      "name": "CVE-2026-11185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11185"
    },
    {
      "name": "CVE-2026-11102",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11102"
    },
    {
      "name": "CVE-2026-11664",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11664"
    },
    {
      "name": "CVE-2026-10948",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10948"
    },
    {
      "name": "CVE-2026-11012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11012"
    },
    {
      "name": "CVE-2026-10963",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10963"
    },
    {
      "name": "CVE-2026-11209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11209"
    },
    {
      "name": "CVE-2026-11088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11088"
    },
    {
      "name": "CVE-2026-10990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10990"
    },
    {
      "name": "CVE-2026-11183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11183"
    },
    {
      "name": "CVE-2026-10933",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10933"
    },
    {
      "name": "CVE-2026-11115",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11115"
    },
    {
      "name": "CVE-2026-11679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11679"
    },
    {
      "name": "CVE-2026-11067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11067"
    },
    {
      "name": "CVE-2026-10934",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10934"
    },
    {
      "name": "CVE-2026-11698",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11698"
    },
    {
      "name": "CVE-2026-11251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11251"
    },
    {
      "name": "CVE-2026-11270",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11270"
    },
    {
      "name": "CVE-2026-11015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11015"
    },
    {
      "name": "CVE-2026-11091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11091"
    },
    {
      "name": "CVE-2026-11025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11025"
    },
    {
      "name": "CVE-2026-10989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10989"
    },
    {
      "name": "CVE-2026-11039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11039"
    },
    {
      "name": "CVE-2026-11249",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11249"
    },
    {
      "name": "CVE-2026-10950",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10950"
    },
    {
      "name": "CVE-2026-10889",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10889"
    },
    {
      "name": "CVE-2026-10926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10926"
    },
    {
      "name": "CVE-2026-11078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11078"
    },
    {
      "name": "CVE-2026-0282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0282"
    },
    {
      "name": "CVE-2026-11659",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11659"
    },
    {
      "name": "CVE-2026-11243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11243"
    },
    {
      "name": "CVE-2026-11014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11014"
    },
    {
      "name": "CVE-2026-11671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11671"
    },
    {
      "name": "CVE-2026-11059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11059"
    },
    {
      "name": "CVE-2026-10960",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10960"
    },
    {
      "name": "CVE-2026-10951",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10951"
    },
    {
      "name": "CVE-2026-11667",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11667"
    },
    {
      "name": "CVE-2026-10931",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10931"
    },
    {
      "name": "CVE-2026-11072",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11072"
    },
    {
      "name": "CVE-2026-10982",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10982"
    },
    {
      "name": "CVE-2026-10997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10997"
    },
    {
      "name": "CVE-2026-11136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11136"
    },
    {
      "name": "CVE-2026-11283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11283"
    },
    {
      "name": "CVE-2026-11164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11164"
    },
    {
      "name": "CVE-2026-11675",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11675"
    },
    {
      "name": "CVE-2026-11213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11213"
    },
    {
      "name": "CVE-2026-10897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10897"
    },
    {
      "name": "CVE-2026-11233",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11233"
    },
    {
      "name": "CVE-2026-11630",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11630"
    },
    {
      "name": "CVE-2026-11211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11211"
    },
    {
      "name": "CVE-2026-10985",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10985"
    },
    {
      "name": "CVE-2026-12011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12011"
    },
    {
      "name": "CVE-2026-11054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11054"
    },
    {
      "name": "CVE-2026-11027",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11027"
    },
    {
      "name": "CVE-2026-12020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12020"
    },
    {
      "name": "CVE-2026-11244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11244"
    },
    {
      "name": "CVE-2026-11151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11151"
    },
    {
      "name": "CVE-2026-11196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11196"
    },
    {
      "name": "CVE-2026-11252",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11252"
    },
    {
      "name": "CVE-2026-11678",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11678"
    },
    {
      "name": "CVE-2026-10978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10978"
    },
    {
      "name": "CVE-2026-11145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11145"
    },
    {
      "name": "CVE-2026-10881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10881"
    },
    {
      "name": "CVE-2026-10984",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10984"
    },
    {
      "name": "CVE-2026-11159",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11159"
    },
    {
      "name": "CVE-2026-11223",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11223"
    },
    {
      "name": "CVE-2026-11287",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11287"
    },
    {
      "name": "CVE-2026-11644",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11644"
    },
    {
      "name": "CVE-2026-10919",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10919"
    },
    {
      "name": "CVE-2026-11654",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11654"
    },
    {
      "name": "CVE-2026-11048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11048"
    },
    {
      "name": "CVE-2026-11089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11089"
    },
    {
      "name": "CVE-2026-11657",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11657"
    },
    {
      "name": "CVE-2026-11269",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11269"
    },
    {
      "name": "CVE-2026-12030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12030"
    },
    {
      "name": "CVE-2026-0277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0277"
    },
    {
      "name": "CVE-2026-11208",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11208"
    },
    {
      "name": "CVE-2026-11097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11097"
    },
    {
      "name": "CVE-2026-11043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11043"
    },
    {
      "name": "CVE-2026-11040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11040"
    },
    {
      "name": "CVE-2026-11035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11035"
    },
    {
      "name": "CVE-2026-12033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12033"
    },
    {
      "name": "CVE-2026-11199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11199"
    },
    {
      "name": "CVE-2026-11149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11149"
    },
    {
      "name": "CVE-2026-11092",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11092"
    },
    {
      "name": "CVE-2026-11198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11198"
    },
    {
      "name": "CVE-2026-11073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11073"
    },
    {
      "name": "CVE-2026-11052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11052"
    },
    {
      "name": "CVE-2026-0278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0278"
    },
    {
      "name": "CVE-2026-11701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11701"
    },
    {
      "name": "CVE-2026-11140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11140"
    },
    {
      "name": "CVE-2026-10945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10945"
    },
    {
      "name": "CVE-2026-11299",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11299"
    },
    {
      "name": "CVE-2026-11227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11227"
    },
    {
      "name": "CVE-2026-11124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11124"
    },
    {
      "name": "CVE-2026-11002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11002"
    },
    {
      "name": "CVE-2026-11273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11273"
    },
    {
      "name": "CVE-2026-11656",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11656"
    },
    {
      "name": "CVE-2026-11255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11255"
    },
    {
      "name": "CVE-2026-11242",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11242"
    },
    {
      "name": "CVE-2026-10890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10890"
    },
    {
      "name": "CVE-2026-11218",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11218"
    },
    {
      "name": "CVE-2026-11201",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11201"
    },
    {
      "name": "CVE-2026-11083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11083"
    },
    {
      "name": "CVE-2026-10973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10973"
    },
    {
      "name": "CVE-2026-11210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11210"
    },
    {
      "name": "CVE-2026-11298",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11298"
    },
    {
      "name": "CVE-2026-11220",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11220"
    }
  ],
  "initial_release_date": "2026-07-09T00:00:00",
  "last_revision_date": "2026-07-09T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0853",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-07-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Palo Alto Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto Networks",
  "vendor_advisories": [
    {
      "published_at": "2026-07-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0276",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0276"
    },
    {
      "published_at": "2026-07-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0285",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0285"
    },
    {
      "published_at": "2026-07-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0277",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0277"
    },
    {
      "published_at": "2026-07-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2026-0010",
      "url": "https://security.paloaltonetworks.com/PAN-SA-2026-0010"
    },
    {
      "published_at": "2026-07-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0286",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0286"
    },
    {
      "published_at": "2026-07-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0282",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0282"
    },
    {
      "published_at": "2026-07-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0279",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0279"
    },
    {
      "published_at": "2026-07-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0280",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0280"
    },
    {
      "published_at": "2026-07-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0278",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0278"
    },
    {
      "published_at": "2026-07-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0288",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0288"
    },
    {
      "published_at": "2026-07-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0287",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0287"
    },
    {
      "published_at": "2026-07-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0281",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0281"
    },
    {
      "published_at": "2026-07-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0284",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0284"
    },
    {
      "published_at": "2026-07-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0283",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0283"
    }
  ]
}

FKIE_CVE-2026-0279

Vulnerability from fkie_nvd - Published: 2026-07-09 19:16 - Updated: 2026-07-09 19:38

Severity

1.3 (Low) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

Summary

References

	URL	Tags
	psirt@paloaltonetworks.com	https://security.paloaltonetworks.com/CVE-2026-0279

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Cloud NGFW",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h16:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h15:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.18:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.17:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.16:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.15:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.14:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h37:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h36:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h31:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h30:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h27:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h26:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h23:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h21:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h18:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h17:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h14:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h13:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h12:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h11:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h10:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h9:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h8:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h7:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h6:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h5:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h4:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h3:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h2:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:h1:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:-:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "affected",
          "product": "PAN-OS",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.1.8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.8",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.2.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.13",
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "11.1.16",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.1.16",
              "status": "affected",
              "version": "11.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "10.2.18-h8",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.16-h9",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.13-h23",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.10-h39",
                  "status": "unaffected"
                },
                {
                  "at": "10.2.7-h36",
                  "status": "unaffected"
                }
              ],
              "lessThan": "10.2.18-h8",
              "status": "affected",
              "version": "10.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Prisma Access",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "12.1.8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "12.1.8",
              "status": "affected",
              "version": "12.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "11.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "10.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "psirt@paloaltonetworks.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple cross site scripting vulnerabilities in the User-ID\u2122 Authentication Portal (aka Captive Portal) service, GlobalProtect\u2122 gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS\u00ae software enables a malicious unauthenticated user to store or execute malicious JavaScript payload.\n\n\nThe security risk posed by this issue is minimized when the management interface and access to the User-ID\u2122 Authentication Portal is restricted to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\n\nThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\n\nCloud NGFW is not affected by this vulnerability."
    }
  ],
  "id": "CVE-2026-0279",
  "lastModified": "2026-07-09T19:38:09.027",
  "metrics": {
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NO",
          "Recovery": "USER",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 1.3,
          "baseSeverity": "LOW",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "UNREPORTED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "AMBER",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "PASSIVE",
          "valueDensity": "DIFFUSE",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "LOW",
          "vulnerabilityResponseEffort": "MODERATE"
        },
        "source": "psirt@paloaltonetworks.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2026-07-09T19:16:58.717",
  "references": [
    {
      "source": "psirt@paloaltonetworks.com",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0279"
    }
  ],
  "sourceIdentifier": "psirt@paloaltonetworks.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "psirt@paloaltonetworks.com",
      "type": "Secondary"
    }
  ]
}

GHSA-6CJ9-CG4W-4M7X

Vulnerability from github – Published: 2026-07-09 21:31 – Updated: 2026-07-09 21:31

Details

The security risk posed by this issue is minimized when the management interface and access to the User-ID™ Authentication Portal is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .

This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).

Cloud NGFW is not affected by this vulnerability.

Severity

1.3 (Low)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-0279"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-79"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-07-09T19:16:58Z",
    "severity": "LOW"
  },
  "details": "Multiple cross site scripting vulnerabilities in the User-ID\u2122 Authentication Portal (aka Captive Portal) service, GlobalProtect\u2122 gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS\u00ae software enables a malicious unauthenticated user to store or execute malicious JavaScript payload.\n\n\nThe security risk posed by this issue is minimized when the management interface and access to the User-ID\u2122 Authentication Portal is restricted to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .\n\nThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\n\nCloud NGFW is not affected by this vulnerability.",
  "id": "GHSA-6cj9-cg4w-4m7x",
  "modified": "2026-07-09T21:31:20Z",
  "published": "2026-07-09T21:31:20Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0279"
    },
    {
      "type": "WEB",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0279"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber",
      "type": "CVSS_V4"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2026-0279 (GCVE-0-2026-0279)

CERTFR-2026-AVI-0853

Solutions

FKIE_CVE-2026-0279

GHSA-6CJ9-CG4W-4M7X

Tags

Sightings

Nomenclature