https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:22:45.548218+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-09551 bdu:2026-09551 2026-10-03T06:22:45.635177+00:00 bdu:2026-09551 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0853 certfr-2026-avi-0853 — De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permetten… 2026-10-03T06:22:45.635226+00:00 certfr-2026-avi-0853 https://cve.radiocsirt.org/vuln/euvd-2026-350993 EUVD-2026-350993 2026-10-03T06:22:45.635248+00:00 EUVD-2026-350993 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0279 fkie_cve-2026-0279 2026-10-03T06:22:45.635260+00:00

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payload.

The security risk posed by this issue is minimized when the management interface and access to the User-ID™ Authentication Portal is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .

This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).

Cloud NGFW is not affected by this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-6cj9-cg4w-4m7x GHSA-6cj9-cg4w-4m7x 2026-10-03T06:22:45.635300+00:00

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payload.

The security risk posed by this issue is minimized when the management interface and access to the User-ID™ Authentication Portal is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .

This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).

Cloud NGFW is not affected by this vulnerability.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0227 NCSC-2026-0227 — Kwetsbaarheden verholpen in Palo Alto Networks PAN-OS 2026-10-03T06:22:45.635324+00:00 NCSC-2026-0227 https://cve.radiocsirt.org/vuln/ssa-104023 SSA-104023 — SSA-104023: Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices 2026-10-03T06:22:45.635350+00:00

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities.

Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications.

[1] https://security.paloaltonetworks.com/

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2261 WID-SEC-W-2026-2261 — Palo Alto Networks PAN-OS: Mehrere Schwachstellen 2026-10-03T06:22:45.635373+00:00

Ein Angreifer kann mehrere Schwachstellen in Palo Alto Networks PAN-OS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.