CVE-2026-0256Disclosure(paloaltonetworks / pan-os)

LOWCVSS 4.8 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.

paloaltonetworks CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

pan-os
ruggedcom_ape1808
ruggedcom_ape1808_firmware

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-05-13); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

paloaltonetworks siemens

Products

pan-osruggedcom_ape1808ruggedcom_ape1808_firmware

18 versions affected across 3 products

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-13	2	Disclosure2
2026-05-14	1	General1
2026-07-27	1	Disclosure1

Full discourse4 posts

BREACHSPIDER@breachspider73d
Disclosure
[CVE Analysis] CVE-2026-0256: Stored XSS in PAN-OS Web Interface Threatens Firewall and Panorama Trust Boundaries in OT https://breachspider.com/intel/2026-07-27-cve-2026-0256-stored-xss-in-pan-os-web-interface-threatens-f #ICS #OTSecurity #SCADA #CriticalInfrastructure
Post summary
The tweet announces CVE‑2026‑0256, a stored XSS flaw in the PAN‑OS web interface that could compromise firewall and Panorama trust boundaries in OT settings.
0000056
2.3K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds147d
General
CVE-2026-0256 Stored Cross-Site Scripting Vulnerability in Palo Alto Networks PAN-OS Web Interface https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-0256
Post summary
CVE-2026-0256 is a stored XSS vulnerability in Palo Alto Networks PAN‑OS Web Interface, with no PoC, exploit, or patch information provided in the text.
0000062
4.0K followersView on X
Infoflowcloud@infoflowcloud147d
Disclosure
🚨*CVE* CVE-2026-0256 A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload u… https://www.cve.org/CVERecord?id=CVE-2026-0256 ----- Traducción: CVE-2026-0256: Un… http://infoflow.cloud`
Post summary
The text discloses that CVE-2026-0256 is a stored XSS vulnerability in Palo Alto Networks PAN‑OS, permitting authenticated administrators to store malicious JavaScript payloads.
0000067
77 followersView on X
CVE@CVEnew147d
Disclosure
CVE-2026-0256 A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload u… https://www.cve.org/CVERecord?id=CVE-2026-0256
Post summary
The post announces a stored XSS vulnerability (CVE-2026-0256) in Palo Alto Networks PAN‑OS that lets an authenticated admin store a JavaScript payload.
00000286
57.5K followersView on X

CPE platform detail161 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

161 of 161 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	paloaltonetworks	pan-os	-	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.10	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.13	-	-
OS	paloaltonetworks	pan-os	10.2.16	-	-
OS	paloaltonetworks	pan-os	10.2.16	-	-
OS	paloaltonetworks	pan-os	10.2.16	-	-
OS	paloaltonetworks	pan-os	10.2.16	-	-
OS	paloaltonetworks	pan-os	10.2.17	-	-
OS	paloaltonetworks	pan-os	10.2.18	-	-
OS	paloaltonetworks	pan-os	10.2.18	-	-
OS	paloaltonetworks	pan-os	10.2.18	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	10.2.7	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.10	-	-
OS	paloaltonetworks	pan-os	11.1.13	-	-
OS	paloaltonetworks	pan-os	11.1.13	-	-
OS	paloaltonetworks	pan-os	11.1.13	-	-
OS	paloaltonetworks	pan-os	11.1.13	-	-
OS	paloaltonetworks	pan-os	11.1.14	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.4	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.6	-	-
OS	paloaltonetworks	pan-os	11.1.7	-	-
OS	paloaltonetworks	pan-os	11.1.7	-	-
OS	paloaltonetworks	pan-os	11.1.7	-	-
OS	paloaltonetworks	pan-os	11.1.7	-	-
OS	paloaltonetworks	pan-os	11.2.10	-	-
OS	paloaltonetworks	pan-os	11.2.10	-	-
OS	paloaltonetworks	pan-os	11.2.10	-	-
OS	paloaltonetworks	pan-os	11.2.10	-	-
OS	paloaltonetworks	pan-os	11.2.10	-	-
OS	paloaltonetworks	pan-os	11.2.10	-	-
OS	paloaltonetworks	pan-os	11.2.11	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.4	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	11.2.7	-	-
OS	paloaltonetworks	pan-os	12.1.4	-	-
OS	paloaltonetworks	pan-os	12.1.4	-	-
OS	paloaltonetworks	pan-os	12.1.4	-	-
HW	siemens	ruggedcom_ape1808	-	-	-
OS	siemens	ruggedcom_ape1808_firmware	-	-	-

Explore more

Back to dashboard paloaltonetworks CVEs siemens CVEs pan-os vulnerabilities

What researchers are saying

CVE-2026-0256

BREACHSPIDER@breachspiderDisclosure

The tweet announces CVE‑2026‑0256, a stored XSS flaw in the PAN‑OS web interface that could compromise firewall and Panorama trust boundaries in OT settings.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

CVE-2026-0256 is a stored XSS vulnerability in Palo Alto Networks PAN‑OS Web Interface, with no PoC, exploit, or patch information provided in the text.

Infoflowcloud@infoflowcloudDisclosure

The text discloses that CVE-2026-0256 is a stored XSS vulnerability in Palo Alto Networks PAN‑OS, permitting authenticated administrators to store malicious JavaScript payloads.

CVE@CVEnewDisclosure

The post announces a stored XSS vulnerability (CVE-2026-0256) in Palo Alto Networks PAN‑OS that lets an authenticated admin store a JavaScript payload.