Palo Alto PAN

Gbhackers •Divya • September 10, 2026

Palo Alto Networks has announced a high-severity buffer overflow vulnerability in PAN-OS that may allow unauthenticated, network-based attackers to execute arbitrary code with root privileges on affected PA-Series hardware firewalls. This vulnerability is tracked as CVE-2026-0310 and stems from PAN-OS XML processing. It impacts both the firewall management web interfaces and the dataplane interfaces. The […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Palo Alto Networks Discovers Multiple Vulnerabilities in PAN-OS and GlobalProtect Palo Alto Networks has disclosed several vulnerabilities affecting its PAN-OS and GlobalProtect products, including CVE-2026-0310, a buffer overflow allowing denial of service and arbitrary code execution on PA-Series firewalls. Other vulnerabilities include CVE-2026-0309, a command injection flaw for authenticated users with Luna HSM, and CVE-2026-0307, which allows local privilege escalation in the GlobalProtect app. CVE-2026-0308 introduces a stored XSS vulnerability in the web interface. The vulnerabilities affect various versions of PAN-OS and GlobalProtect across multiple platforms. Palo Alto Networks is not aware of any active exploitation of these vulnerabilities. Urgent patches are recommended for affected systems, with specific upgrade paths provided for various versions. The overall risk is heightened for PA-Series firewalls due to the potential for arbitrary code execution. 7 sources 65

Extracted Entities

Palo Alto PAN

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (2)

Platforms (2)