Multiple critical vulnerabilities discovered in Palo Alto Networks products with risks of RCE, privilege escalation, and DoS
Multiple security vulnerabilities affecting a range of Palo Alto Networks products have been disclosed, impacting components such as Checkov by Prisma Cloud, GlobalProtect App, PAN-OS, and Prisma Access. These flaws include arbitrary remote code execution, elevation of privileges, denial of service, bypass of security policies, data integrity and confidentiality compromises, and server-side request forgery (SSRF). Affected versions include various releases prior to specified update levels across Windows and network security products. Palo Alto Networks has published security bulletins and patched affected versions; users are strongly advised to update immediately to mitigate risk. The vulnerabilities represent a high operational urgency due to their critical nature and potential for remote exploitation.
Entenda a falha
A vulnerabilidade
Palo Alto Networks disclosed nine CVEs (CVE-2026-0323 to CVE-2026-0331) across Checkov by Prisma Cloud, GlobalProtect App for Windows, PAN-OS, Prisma Access and Prisma Access Browser. The CERT-FR advisory lists the impacts as remote arbitrary code execution, privilege escalation, remote denial of service, security policy bypass, data integrity and confidentiality compromise, and SSRF. The articles do not say which CVE causes which impact, nor what access or authentication an attacker needs. Fixed versions include Checkov 3.4.2, GlobalProtect 6.2.8-h4 and 6.3.3-h3, PAN-OS 10.2.18-h14, 11.1.16-h5, 11.2.16-h2, 12.1.10-h4 and 12.2.4-h2, Prisma Access 10.2.10-h43 and 12.1.10-h4 (the advisory also lists 11.2.x as fixed at 12.1.10-h4), and Prisma Access Browser 157.19.4.39.
Como foi descoberta
The articles do not say how or by whom the flaws were found. Palo Alto Networks published security bulletins for each CVE on 11 November 2026, plus bulletin PAN-SA-2026-0014, and CERT-FR issued its advisory the following day pointing to the vendor bulletins for the fixes. The articles report no exploitation in the wild.
Explicação gerada por IA a partir da matéria e dos artigos, em 12/11/2026 13:26.
Linha do tempo
-
Multiple critical vulnerabilities discovered in Palo Alto Networks products with risks of RCE, privilege escalation, and DoS
ler a análise desta fonte ocultar
Multiple security vulnerabilities affecting a range of Palo Alto Networks products have been disclosed, impacting components such as Checkov by Prisma Cloud, GlobalProtect App, PAN-OS, and Prisma Access. These flaws include arbitrary remote code execution, elevation of privileges, denial of service, bypass of security policies, data integrity and confidentiality compromises, and server-side request forgery (SSRF). Affected versions include various releases prior to specified update levels across Windows and network security products. Palo Alto Networks has published security bulletins and patched affected versions; users are strongly advised to update immediately to mitigate risk. The vulnerabilities represent a high operational urgency due to their critical nature and potential for remote exploitation.