Security Alert (A26-07-18): Multiple Vulnerabilities in Palo Alto Products


 

Published on: 09 July 2026

Description:

Palo Alto has published the security advisories to address multiple vulnerabilities in several Palo Alto products. The detailed information about the vulnerabilities can be found at:
https://security.paloaltonetworks.com/CVE-2026-0276
https://security.paloaltonetworks.com/CVE-2026-0277
https://security.paloaltonetworks.com/CVE-2026-0278
https://security.paloaltonetworks.com/CVE-2026-0279
https://security.paloaltonetworks.com/CVE-2026-0280
https://security.paloaltonetworks.com/CVE-2026-0281
https://security.paloaltonetworks.com/CVE-2026-0282
https://security.paloaltonetworks.com/CVE-2026-0283
https://security.paloaltonetworks.com/CVE-2026-0284
https://security.paloaltonetworks.com/CVE-2026-0285
https://security.paloaltonetworks.com/CVE-2026-0286
https://security.paloaltonetworks.com/CVE-2026-0287
https://security.paloaltonetworks.com/CVE-2026-0288

 

Affected Systems:

  • Cortex XDR Broker VM versions 20.0.96 prior to 31.0.58
  • PAN-OS versions 10.2
  • PAN-OS versions 11.1 prior to 11.1.16
  • PAN-OS versions 11.2 prior to 11.2.13
  • PAN-OS versions 12.1 prior to 12.1.8
  • Prisma Access versions 10.2
  • Prisma Access versions 11.2
  • Prisma Access versions 12.1 prior to 12.1.8
  • Prisma Access Agent on iOS versions prior to 26.2.1
  • Prisma Access Agent on Windows versions prior to 26.2.1

For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.

 

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution, denial of service, elevation of privilege, information disclosure, security restriction bypass or tampering on an affected system.

 

Recommendation:

Patches for affected systems are now available. For detailed information of the available patches, please refer to the section "Solution" of corresponding security advisory at vendor's website.

System administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

 

More Information:

  • https://security.paloaltonetworks.com/CVE-2026-0276
  • https://security.paloaltonetworks.com/CVE-2026-0277
  • https://security.paloaltonetworks.com/CVE-2026-0278
  • https://security.paloaltonetworks.com/CVE-2026-0279
  • https://security.paloaltonetworks.com/CVE-2026-0280
  • https://security.paloaltonetworks.com/CVE-2026-0281
  • https://security.paloaltonetworks.com/CVE-2026-0282
  • https://security.paloaltonetworks.com/CVE-2026-0283
  • https://security.paloaltonetworks.com/CVE-2026-0284
  • https://security.paloaltonetworks.com/CVE-2026-0285
  • https://security.paloaltonetworks.com/CVE-2026-0286
  • https://security.paloaltonetworks.com/CVE-2026-0287
  • https://security.paloaltonetworks.com/CVE-2026-0288
  • https://www.hkcert.org/security-bulletin/palo-alto-products-multiple-vulnerabilities_20260709
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0276 (to CVE-2026-0288)


Tag: Palo Alto
Tags