CVE-2026-0301
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS software allows an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted.
Risk Assessment
An unauthorized user can obtain sensitive information, potentially leading to data confidentiality breach and further attacks.
Recommendation
Update PAN-OS to the patched version and restrict network access to devices.
Other vulnerabilities in Palo Alto Networks PAN-OS
See all- CVE-2017-15942High
Palo Alto Networks PAN-OS versions before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.13, and 8.0.x before 8.0.6 allow remote attackers to cause a denial of service via vectors related to the management interface.
- CVE-2017-7218High
The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters.
- CVE-2016-9151High
Palo Alto Networks PAN-OS versions before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allow local users to gain privileges via crafted values of unspecified environment variables.
- CVE-2016-1712High
Palo Alto Networks PAN-OS versions before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before 7.0.8 may allow local users to gain privileges by leveraging improper sanitization of the root_reboot local invocation.
- CVE-2016-3654High
The device management command line interface (CLI) in Palo Alto Networks PAN-OS before version 5.0.18 and in versions 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote authenticated administrators to execute arbitrary OS commands via an SSH command parameter.
- CVE-2026-0284Critical
An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS software allows an unauthenticated attacker with network access to inject malicious XML content, potentially leading to information disclosure or corruption of internal LSVPN satellite data. Panorama, Cloud NGFW, and Prisma Access are not affected by this vulnerability.
- CVE-2024-3393HighActively exploited
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
- CVE-2024-3400CriticalActively exploited
In Palo Alto Networks PAN-OS GlobalProtect feature, a command injection vulnerability due to arbitrary file creation exists. An unauthenticated attacker can execute arbitrary code with root privileges on the firewall.
- CVE-2022-0028HighActively exploited
A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The attack would appear to originate from a Palo Alto Networks PA-Series, VM-Series, or CN-Series firewall against an attacker-specified target. This requires a URL filtering profile with blocked categories assigned to a source zone with an external facing interface.
- CVE-2017-15940Critical
The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to execute arbitrary code via unspecified vectors.
Original NVD description (English source)
An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS