https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:47:21 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-09551 bdu:2026-09551 https://cve.radiocsirt.org/vuln/bdu:2026-09551 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0853 certfr-2026-avi-0853 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0853 https://cve.radiocsirt.org/vuln/euvd-2026-350993 EUVD-2026-350993 https://cve.radiocsirt.org/vuln/euvd-2026-350993 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0279 <p>Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payload.</p> <p>The security risk posed by this issue is minimized when the management interface and access to the User-ID™ Authentication Portal is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .</p> <p>This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).</p> <p>Cloud NGFW is not affected by this vulnerability.</p> <p>Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payload.</p> <p>The security risk posed by this issue is minimized when the management interface and access to the User-ID™ Authentication Portal is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .</p> <p>This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).</p> <p>Cloud NGFW is not affected by this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-0279 https://cve.radiocsirt.org/vuln/ghsa-6cj9-cg4w-4m7x <p>Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payload.</p> <p>The security risk posed by this issue is minimized when the management interface and access to the User-ID™ Authentication Portal is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .</p> <p>This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).</p> <p>Cloud NGFW is not affected by this vulnerability.</p> <p>Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payload.</p> <p>The security risk posed by this issue is minimized when the management interface and access to the User-ID™ Authentication Portal is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .</p> <p>This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).</p> <p>Cloud NGFW is not affected by this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-6cj9-cg4w-4m7x https://cve.radiocsirt.org/vuln/ncsc-2026-0227 NCSC-2026-0227 https://cve.radiocsirt.org/vuln/ncsc-2026-0227 https://cve.radiocsirt.org/vuln/ssa-104023 <p>Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities.</p> <p>Customers are advised to consult and implement the workarounds provided in Palo Alto Networks&#39; upstream security notifications.</p> <p>[1] https://security.paloaltonetworks.com/</p> <p>Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities.</p> <p>Customers are advised to consult and implement the workarounds provided in Palo Alto Networks&#39; upstream security notifications.</p> <p>[1] https://security.paloaltonetworks.com/</p> https://cve.radiocsirt.org/vuln/ssa-104023 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2261 <p>Ein Angreifer kann mehrere Schwachstellen in Palo Alto Networks PAN-OS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Palo Alto Networks PAN-OS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2261