EUVD-2026-75255

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

CVE-2026-0309

CVE-2026-0309 is currently a reserved candidate with no publicly available technical details. The vulnerability has not yet been announced. Monitor for updates once the assigning organization publicizes the entry.

CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service DoS condition on VM-Series firewalls or execute arbitrary co...

EUVD-2026-75253

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service DoS condition on VM-Series firewalls or execute arbitrary co...

CVE-2026-0310

CVE-2026-0310 is a buffer overflow in the XML processing functionality of Palo Alto Networks PAN-OS , rated CVSS 4.0 9.2 (Critical) . An unauthenticated attacker with network access to the management web or dataplane interface can cause a denial of service on VM-Series firewalls or achieve arbitr...

CVE-2025-0133

CVE-2025-0133 CVE-2025-0133 漏洞利用 CVE-2025-0133 是 Palo Alto Networks PAN-OS® 软件中 GlobalProtect™ 网关和门户功能的一个反射型跨站脚本（XSS）漏洞。拥有 Captive Portal 访问权限的认证用户可能被诱骗点击特制链接，导致在其浏览器上下文中执行任意 JavaScript。这可能引发会话劫持、凭证窃取或其他客户端攻击。 严重性：中危（CVSS v3.1 基础分数：6.1；向量：CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N） 受影响版本： PAN-O...

CVE-2026-0300-PANOS

CVE-2026-0300-PANOS 🔓 Palo Alto Networks PAN-OS User-ID 门户中的未认证远程代码执行（RCE）漏洞 📋 漏洞详情 描述 本仓库包含针对 CVE-2026-0300 的安全研究与概念验证（PoC）演示，这是 Palo Alto Networks PAN-OS 中的一个严重漏洞，允许未认证攻击者在易受攻击的系统上执行任意代码。 ⚠️ 免责声明 ⚠️ 重要法律声明 本仓库仅 用于教育和授权安全研究目的。 🚫 请勿 将本代码用于您不拥有或未经明确许可测试的系统 📜 在大多数司法管辖区，未经授权访问计算机系统是非法的 🔒...

PAN-OS-User-ID-Buffer-Overflow-PoC

🛡️ CVE-2026-0300: Análisis de RCE en el Portal User-ID™ de PAN-OS Prueba de Concepto de Investigación: CWE-787 Escritura Fuera de Límites 📌 Resumen CVE-2026-0300 es una vulnerabilidad de desbordamiento de búfer de alta gravedad identificada en el Portal de Autenticación User-ID™ Portal Cautivo de...

cve-2026-0300-audit

CVE-2026-0300 审计工具 针对 CVE-2026-0300 的只读审计工具——这是 PAN-OS User-ID 认证门户（旧称“Captive Portal”）中存在于 PA 系列和 VM 系列防火墙上的未认证缓冲区溢出漏洞。 本仓库随 Tailwind Resource Group 安全公告 TRG-SA-2026-003 一同发布，提供以下内容： auditportal.py — 第 1 层：单防火墙审计 auditfleet.py — 第 2 层：由 Panorama 驱动的机群扫描（并发） panosaudit.py — 两个 CLI 共用的共享库 这些脚本是只读...

CVE-2026-0300-POC

🛡️ CVE-2026-0300：PAN-OS User-ID™ 门户远程代码执行分析 研究概念验证：CWE-787 越界写入 📌 概述 CVE-2026-0300 是在 Palo Alto Networks PAN-OS User-ID™ 身份验证门户（强制门户）中发现的一个高危缓冲区溢出漏洞。本研究仓库演示了该漏洞的技术逻辑，重点说明未认证的网络数据包如何导致以 root 权限执行远程代码执行（RCE） 。 📊 漏洞详情 特性| 详情 ---|--- CVE 编号| CVE-2026-0300 严重性评分| 9.3（严重） 弱点类型| CWE-787：越界写入 攻击向量| 网络（未认证...

Palo Alto Networks PAN-OS 9.0.x < 9.0.7 / 9.1.x < 9.1.2 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 9.0.x prior to 9.0.7 or 9.1.x prior to 9.1.2. It is, therefore, affected by a vulnerability. A format string vulnerability in the Varrcvr daemon of PAN-OS on PA-7000 Series devices with a Log Forwarding Card LFC allows remote...

Palo Alto Networks PAN-OS 10.1.x / 10.2.x / 11.0.x / 11.1.x / 9.1.x Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 9.1.x, 10.1.x, 10.2.x, 11.0.x, or 11.1.x. It is, therefore, affected by a vulnerability. This vulnerability allows an attacker performing a meddler-in-the-middle attack between Palo Alto Networks PAN-OS...

Palo Alto Networks PAN-OS 8.1.x < 8.1.13 / 9.0.x < 9.0.7 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.13 or 9.0.x prior to 9.0.7. It is, therefore, affected by a vulnerability. A stack-based buffer overflow vulnerability in the management server component of PAN-OS allows an authenticated user to upload a...

Palo Alto Networks PAN-OS 10.2.x < 10.2.14 / 11.1.x < 11.1.8 / 11.2.x < 11.2.8 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.2.x prior to 10.2.14, 11.1.x prior to 11.1.8, or 11.2.x prior to 11.2.8. It is, therefore, affected by a vulnerability. The Terrapin attack allows an attacker with the ability to intercept SSH traffic on affected Palo Alto...

PT-2026-89277

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

PAN-OS-CVE-2024-3400-Command-Injection-Investigation

PAN-OS CVE-2024-3400 コマンドインジェクション試行の調査 概要 本プロジェクトでは、PAN-OS GlobalProtect サービスを標的とした CVE-2024-3400 のコマンドインジェクション試行 の調査について記録しています。 目的は以下の判断です： 実際の攻撃であるかどうか コマンド実行が発生したかどうか 侵害の痕跡がないかどうか アラート概要 重大なアラートがトリガーされ、悪用試行の可能性が示されました。 ターゲット：172.16.17.139 PA-Firewall-01 送信元：144.172.79.92...

CVE-2026-0300

🚨 CVE-2026-0300 - Palo Alto Networks PAN-OS 严重未认证远程代码执行漏洞 User-ID™ 认证门户 （强制门户）中的缓冲区溢出 — 已在野外被积极利用 📋 概述 PAN-OS 的 User-ID 认证门户中存在一个严重缓冲区溢出漏洞 （CWE-787），允许未认证攻击者 通过发送特制数据包实现以 root 权限远程执行代码 。 CVE 编号 ：CVE-2026-0300 CVSS 4.0 评分 ：9.3（严重） 紧急程度 ：最高 🛠️ 受影响产品 PA 系列防火墙 VM 系列防火墙 受影响的 PAN-OS 版本 不受影响 ：Cloud...

CVE-2026-0300

PAN-OS CVE-2026-0300 Non-Destructive Exposure Survey Tool Overview This tool is a non-destructive exposure survey utility for assessing whether a target PAN-OS service may expose network-accessible surfaces related to CVE-2026-0300. The tool is intended for authorized defensive security validatio...

PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

PAN-OS: Buffer Overflow Vulnerability via XML Processing

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service DoS condition on VM-Series firewalls or execute arbitrary co...