Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payload. The security risk posed by this issue is minimized when the management interface and access to the User-ID™ Authentication Portal is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW is not affected by this vulnerability.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🔴 Palo Alto Networks PAN-#OS, Multiple Cross-Site Scripting (XSS), #CVE-2026-0279 (High) -DC-Jul2026-906 https://dailycve.com/palo-alto-networks-pan-os-multiple-cross-site-scripting-xss-cve-2026-0279-high-dc-jul2026-906/
Post summary
Palo Alto Networks PAN‑OS has a high‑severity CVE‑2026‑0279 vulnerability that allows multiple XSS attacks; no PoC, exploit, or patch details are provided in the snippet.
Paloaltoの脆弱性情報 「CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities (Severity: LOW)」が公開されました。 → https://security.paloaltonetworks.com/CVE-2026-0279
Post summary
Palo Alto Networks has released a public advisory for CVE‑2026‑0279, describing a low‑severity XSS vulnerability, but no proof‑of‑concept, exploit code, patch details, or evidence of active exploitation is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | paloaltonetworks | pan-os | - | - | - |