https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:55:19.429997+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-05709 bdu:2025-05709 2026-10-03T00:55:19.433581+00:00 bdu:2025-05709 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0410 certfr-2025-avi-0410 — De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permetten… 2026-10-03T00:55:19.433613+00:00 certfr-2025-avi-0410 https://cve.radiocsirt.org/vuln/euvd-2026-239364 EUVD-2026-239364 2026-10-03T00:55:19.433632+00:00 EUVD-2026-239364 https://cve.radiocsirt.org/vuln/fkie_cve-2025-0136 fkie_cve-2025-0136 2026-10-03T00:55:19.433644+00:00

Using the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks PAN-OS® firewalls (PA-7500, PA-5400, PA-5400f, PA-3400, PA-1600, PA-1400, and PA-400 Series) leads to unencrypted data transfer to devices that are connected to the PAN-OS firewall through IPSec.

This issue does not affect Cloud NGFWs, Prisma® Access instances, or PAN-OS VM-Series firewalls.

NOTE: The AES-128-CCM encryption algorithm is not recommended for use.

 https://cve.radiocsirt.org/vuln/ghsa-9wg5-mqr8-x4m3 GHSA-9wg5-mqr8-x4m3 2026-10-03T00:55:19.433674+00:00

Using the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks PAN-OS® firewalls (PA-7500, PA-5400, PA-5400f, PA-3400, PA-1600, PA-1400, and PA-400 Series) leads to unencrypted data transfer to devices that are connected to the PAN-OS firewall through IPSec.

This issue does not affect Cloud NGFWs, Prisma® Access instances, or PAN-OS VM-Series firewalls.

NOTE: The AES-128-CCM encryption algorithm is not recommended for use.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1064 WID-SEC-W-2025-1064 — PaloAlto Networks PAN-OS: Mehrere Schwachstellen 2026-10-03T00:55:19.433705+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PaloAlto Networks PAN-OS ausnutzen, um einen Denial of Service Angriff durchzuführen, Cross-Site-Scripting durchzuführen, Informationen auszuspähen oder Sicherheitsmaßnahmen zu umgehen.