72 matches found
CVE-2026-0279
Multiple cross site scripting vulnerabilities in the User-IDā¢ Authentication Portal aka Captive Portal service, GlobalProtectā¢ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OSĀ® software enables a malicious unauthenticated user to store or execute malicious JavaScript payloa...
Exploit for Reliance on Cookies without Validation and Integrity Checking in Paloaltonetworks Pan-Os
šØ CVE-2026-0257 - Authentication Bypass Vulnerabilities...
Exploit for CVE-2026-0257
CVE-2026-0257 ā PAN-OS GlobalProtect Authentication Bypass...
CVE-2026-0257
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OSĀ® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues...
VulnCheck KEV: CVE-2026-0257
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OSĀ® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues...
CVE-2026-0257
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OSĀ® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues...
CVE-2026-0257
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OSĀ® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues...
CVE-2026-0257 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OSĀ® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues...
CVE-2026-0257
CVE-2026-0257 affects Palo Alto Networks PAN-OS GlobalProtect Portal and GlobalProtect Gateway (not Panorama/Cloud NGFW). The vulnerability is an authentication bypass (CWE-565) that can allow an unauthenticated attacker to bypass security restrictions and establish an unauthorized VPN connection...
PT-2026-40754
Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 10.2.7 PAN-OS version 10.2.8 PAN-OS version 10.2.9 PAN-OS version 10.2.10 PAN-OS version 10.2.11 Prisma Access affected versions not specified Description Authentication bypass flaws in the GlobalProtect portal and...
Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, or 12.1.x. It is, therefore, affected by a vulnerability. Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN- OS software...
Siemens APE1808 Improper Neutralization of Input During Web Page Generation (CVE-2025-0133)
A reflected cross-site scripting XSS vulnerability in the GlobalProtect gateway and portal features of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when they click on a specially crafted link. The...
CVE-2026-0227 PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal
A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service DoS to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode...
CVE-2026-0227
CVE-2026-0227 affects Palo Alto Networks PAN-OS with a DoS that unauthenticated actors can trigger by repeatedly sending requests to GlobalProtect Gateway/Portal, causing the firewall to enter maintenance mode. The issue is described as due to an improper check for exceptional conditions (CWE-754...
CVE-2026-0227 PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal
A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service DoS to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode...
EUVD-2018-2217
Malware in sbrugna...
EUVD-2024-15812
Malicious code in bioql PyPI...
EUVD-2024-31977
Malicious code in bioql PyPI...
Exploit for CVE-2025-0133
Description: It is a POC for CVE-2025-0133 that is applicab...
The vulnerability of the GlobalProtect Gateway and GlobalProtect Portal operating system PAN-OS allows a perpetrator to execute cross-site scripting attacks.
The vulnerability of the GlobalProtect Gateway and GlobalProtect Portal operating system in PAN-OS is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...