PT-2026-56909

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal aka Captive Portal service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payloa...

CVE-2026-0279: Improper Neutralization of Input During Web Page Generation

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal aka Captive Portal service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payloa...

EUVD-2026-27879

A buffer overflow vulnerability in the User-ID™ Authentication Portal aka Captive Portal service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. T...

Palo Alto Networks PAN-OS buffer error vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall devices. There is a buffer overflow vulnerability in Palo Alto Networks PAN-OS, which stems from insufficient boundary checks during the processing of certain data packets by the User-ID Authenticati...

CVE-2026-0300: Out-of-bounds Write

A buffer overflow vulnerability in the User-ID™ Authentication Portal aka Captive Portal service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. T...

Content Spoofing

org.wso2.identity.apps:authentication-portal is vulnerable to Content Spoofing. The vulnerability is due to improper handling and validation of error messages passed through URL parameters, which allows an attacker to inject arbitrary content into the user interface and deceive users through...

EUVD-2025-29270

Malicious code in bioql PyPI...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.4.37) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.4.37)

org.wso2.identity.apps:authentication-portal MAVEN version 1.4.37 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.2.404) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.2.404)

org.wso2.identity.apps:authentication-portal MAVEN version 1.2.404 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.2.375) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.2.375)

org.wso2.identity.apps:authentication-portal MAVEN version 1.2.375 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.0.103) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.0.103)

org.wso2.identity.apps:authentication-portal MAVEN version 1.0.103 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.4.123) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.4.123)

org.wso2.identity.apps:authentication-portal MAVEN version 1.4.123 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.2.128) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.2.128)

org.wso2.identity.apps:authentication-portal MAVEN version 1.2.128 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.4.67) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.4.67)

org.wso2.identity.apps:authentication-portal MAVEN version 1.4.67 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.2.637) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.2.637)

org.wso2.identity.apps:authentication-portal MAVEN version 1.2.637 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.0.242) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.0.242)

org.wso2.identity.apps:authentication-portal MAVEN version 1.0.242 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.0.443) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.0.443)

org.wso2.identity.apps:authentication-portal MAVEN version 1.0.443 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.6.132) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.6.132)

org.wso2.identity.apps:authentication-portal MAVEN version 1.6.132 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.2.296) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.2.296)

org.wso2.identity.apps:authentication-portal MAVEN version 1.2.296 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.3.12) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.3.12)

org.wso2.identity.apps:authentication-portal MAVEN version 1.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...