BlueSTAR: Tiered Agentic Architecture for Autonomous Cyber Defense

Cyber attacks are increasingly automated, narrowing the time available for human analysts to detect, reason about, and respond to intrusions. Large language models LLMs offer a promising foundation for autonomous cyber defense because they can correlate heterogeneous evidence and reason about...

Self-Verifying Anomaly Detection Using Explainable AI for Cybersecurity of DER Networks

The rapid growth of Distributed Energy Resources DERs has significantly expanded the cyber attack surface of modern power grids. Furthermore, increasing sophistication in attack techniques demands anomaly detection systems ADS that are accurate, interpretable, and reliable to support DER...

CVE-2026-0307: Untrusted Search Path

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

PT-2026-89283

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITYSYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

CVE-2026-0308: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama...

CVE-2026-0302: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...

CVE-2026-0303: Inclusion of Functionality from Untrusted Control Sphere

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

CVE-2026-88001

Open WebUI versions 0.9.5 through 0.11.1 contained a server-side request forgery (SSRF) weakness in its web-fetch functionality. When AIOHTTP_CLIENT_ALLOW_REDIRECTS was enabled, HTTP redirect destinations were not revalidated against WEB_FETCH_FILTER_LIST or private-address controls. An authentic...

Checkov by Prisma Cloud: OS Command Injection Vulnerability

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov. Work around: No known workarounds exist for this issue...

Chromium: Monthly Vulnerability Update (September 2026)

Palo Alto Networks incorporated the following Chromium security fixes into our products: https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop28.html Work around: No known workarounds exist for this issue...

Cortex XDR Broker VM: Privilege Escalation Vulnerability

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM. Work around: No known workarounds exist for this issue...

renode v1.17.0

Renode Copyright c 2010-2026 Antmicro What is Renode? Renode was created by Antmicro as a virtual development tool for multi-node embedded networks both wired and wireless and is intended to enable a scalable workflow for creating effective, tested and secure IoT systems. With Renode, developing,...

PT-2026-89139

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions prior to 12.2.3 Panorama affected versions not specified Description A buffer overflow exists in the XML processing functionality of PAN-OS. An unauthenticated attacker with network access to the management w...

Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0

Summary An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. Impact An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modif...

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App lies in the use of an unreliable search path, allowing attackers to escalate their privileges.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to increase their privileges...

Exploit for Improper Verification of Cryptographic Signature in Paloaltonetworks Pan-Os

Jozini Network Scanner Built on 2026-09-05 at KwaQondile Libr...

opensoho v0.15.1

Warning this is an early release, please read the release notes of ALL the releases until now OpenSOHO Documentation OpenSOHO is built to manage a small number OpenWRT based network devices. Hence the name SOHO from Small Office Home Office SOHO Networks. From 2 to 20 devices there is no hard lim...

F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K000161728)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.4 / 17.5.1.8 / 21.1.0.1. It is, therefore, affected by a vulnerability as referenced in the K000161728 advisory. A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker ...

CVE-2026-51686: Improper Access Control

Incorrect access control in the setWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reconfigure or disable wireless networks via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67343

A blind server-side request forgery SSRF vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...