Palo Alto Networks Patches 13 Product Vulnerabilities
Summary
Palo Alto Networks patched 13 product vulnerabilities, including PAN-OS buffer overflows that could enable denial of service and potentially code execution. The company says it is unaware of exploitation.
Key points
- CVE-2026-0288 covers multiple buffer overflows in PAN-OS. An unauthenticated attacker with network access could cause denial of service and potentially achieve arbitrary code execution with crafted traffic.
- The risk of CVE-2026-0288 exploitation is mitigated by restricting access to the User-ID Terminal Server Agent to trusted internal IP addresses.
- Seven vulnerabilities are rated medium severity; PAN-OS flaws include potential denial of service, root command execution, unauthorized requests to internal services, information exposure, and authentication bypass.
- Medium-severity flaws in Prisma Access Agent could enable man-in-the-middle attacks to intercept VPN traffic and bypass data-loss-prevention controls.
- Five low-severity vulnerabilities could allow privilege escalation, XSS-based code execution, firewall policy bypass, file deletion, or information disclosure.
- Palo Alto Networks says it is unaware of attacks exploiting the vulnerabilities.
Article Details
- Vulnerability Types
- Buffer overflow
- Denial of service
- Arbitrary code execution
- Arbitrary OS command execution
- Unauthorized requests to internal services
- Information disclosure
- Authentication bypass
- Man-in-the-middle attacks
- VPN traffic interception
- DLP policy enforcement bypass
- Privilege escalation
- Cross-site scripting
- Firewall policy bypass
- File deletion
- Severity
- High, medium, and low; CVE-2026-0288 is rated high severity and highest urgency.
- Exploitation Status
- not_reported
- Exploit Availability
- unknown
- Patch Status
- available
- Workarounds
- Limit access to the User-ID Terminal Server Agent (TSA) to trusted internal IP addresses.
CVE
Vendors
GoogleThe new advisories cover 13 vulnerabilities specific to Palo Alto Networks products, as well as more than 500 flaws patched recently by Google in Chromium, which the cybersecurity giant uses for its Prisma browser.Palo Alto NetworksPalo Alto Networks on Wednesday published advisories describing more than a dozen vulnerabilities affecting its products.
Products
ChromiumThe new advisories cover 13 vulnerabilities specific to Palo Alto Networks products, as well as more than 500 flaws patched recently by Google in Chromium, which the cybersecurity giant uses for its Prisma browser.PAN-OSAssigned high severity and highest urgency ratings, the CVE covers multiple buffer overflows in the PAN-OS software, which powers Palo Alto’s firewalls.Prisma Access AgentThe remaining medium-severity vulnerabilities impact Prisma Access Agent and they can be exploited for MitM attacks that enable VPN traffic interception and bypassing of DLP policy enforcement controls.Prisma browserThe new advisories cover 13 vulnerabilities specific to Palo Alto Networks products, as well as more than 500 flaws patched recently by Google in Chromium, which the cybersecurity giant uses for its Prisma browser.