IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
6.6Media

CVE-2026-0331PAN-OS: Sensitive Information Disclosure Vulnerability

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access Publicada: (hace 3 días)

Descripción

An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remote attacker with network access to obtain sensitive firewall and session information by sending traffic to or through a dataplane interface. Panorama is not affected by this vulnerability.

Debilidad (CWE): CWE-200

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Palo Alto Networks Cloud NGFW All
Palo Alto Networks PAN-OS 12.2.0 – < 12.2.4-h2, 12.1.0 – < 12.1.10-h4, 11.2.0 – < 11.2.16-h2, 11.1.0 – < 11.1.16-h5, 10.2.0 – < 10.2.18-h14
Palo Alto Networks Prisma Access 12.1.0 – < 12.1.10-h4, 11.2.0 – < 11.2.7-h24, 10.2.0 – < 10.2.10-h43

Referencias y parches

CVE recientes del mismo producto — Palo Alto PAN-OS / GlobalProtect

1.3Baja
CVE-2026-0325

PAN-OS: GlobalProtect Authorization Bypass Vulnerability

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely…

1.7Baja
CVE-2026-0326

PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption. Panorama and Prisma® Access are not affected by this vulnerability.

2.3Baja
CVE-2026-0327

PAN-OS: Privilege Escalation Vulnerability in GlobalProtect

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A privilege escalation vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated, lower-privileged user to obtain the privileges and configuration of a higher-privileged user. Cloud NGFW and Panorama are not…

2.7Baja
CVE-2026-0328

PAN-OS: User Impersonation through GlobalProtect Portal

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

Authentication bypass vulnerabilities in the GlobalProtect™ portal and gateway of Palo Alto Networks PAN-OS® software enables an unauthenticated user to bypass security restrictions and establish an unauthorized VPN connection. Panorama, Cloud NGFW, and P…

4.6Media
CVE-2026-0329

PAN-OS: Buffer Overflow Vulnerability

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A buffer overflow vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Cl…

6.1Media
CVE-2026-0330

PAN-OS: Authenticated Remote Code Execution (RCE) in Panorama

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A remote code execution (RCE) vulnerability in Palo Alto Networks PAN-OS® software on Panorama enables an authenticated administrator with network access to execute arbitrary code with root privileges. The security risk posed by this issue is significantly…