Cloud Ngfw
Approved changes feed: RSS · Atom
cpe:2.3:a:palo_alto_networks:cloud_ngfw:all:*:*:*:*:*:*:*part: a version: all update: *
| Vendor | Palo Alto Networks (b3fb2ed8-9543-594b-b76a-18c6d89c012d) |
|---|---|
| Product | Cloud Ngfw (e655abbe-964d-509a-b417-d0d8dcf7b148) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-0321 |
not_vulnerable | 2026-11-03 10:17:01.814817 |
PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services
Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.
Cloud NGFW and Panorama are not affected by this vulnerability.
Published: 2026-10-14T19:58:55.823Z
Updated: 2026-10-15T19:31:16.341Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0319 |
not_vulnerable | 2026-11-03 10:17:00.794481 |
PAN-OS: Improper Input Handling Vulnerability
An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user.
Cloud NGFW and Panorama are not affected by this vulnerability.
Published: 2026-10-14T20:15:32.174Z
Updated: 2026-10-15T18:53:43.155Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0322 |
not_vulnerable | 2026-11-03 10:16:59.958512 |
PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.
The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .
This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).
Cloud NGFW and Prisma® Access are not impacted by this vulnerability.
Published: 2026-10-14T17:26:52.448Z
Updated: 2026-10-15T03:57:17.169Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0265 |
not_vulnerable | 2026-06-08 07:47:11.738643 |
PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled
An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service (CAS) is enabled.
The risk is higher if CAS is enabled on the management interface and lower when any other login interfaces are used.
The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .
This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).
Cloud NGFW and Prisma Access® are not impacted by this vulnerability.
Published: 2026-05-13T17:38:33.822Z
Updated: 2026-10-15T01:11:33.202Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0263 |
not_vulnerable | 2026-06-08 07:47:11.641780 |
PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing
A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall, or cause a denial of service (DoS) condition.
Panorama, Cloud NGFW, and Prisma® Access are not impacted by these vulnerabilities.
Published: 2026-05-13T17:47:05.198Z
Updated: 2026-05-14T03:56:32.299Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0261 |
not_vulnerable | 2026-06-08 07:47:11.531998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0258 |
not_vulnerable | 2026-06-08 07:47:11.390354 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0257 |
not_vulnerable | 2026-06-08 07:47:11.374873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0227 |
not_vulnerable | 2026-06-08 07:47:10.999478 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.