High Threat Security Alert (A26-10-22): Multiple Vulnerabilities in Palo Alto Products


 

Published on: 15 October 2026

Description:

Palo Alto has published the security advisories to address multiple vulnerabilities in several Palo Alto products. The detailed information about the vulnerabilities can be found at:
https://security.paloaltonetworks.com/CVE-2026-0311
https://security.paloaltonetworks.com/CVE-2026-0312
https://security.paloaltonetworks.com/CVE-2026-0313
https://security.paloaltonetworks.com/CVE-2026-0314
https://security.paloaltonetworks.com/CVE-2026-0315
https://security.paloaltonetworks.com/CVE-2026-0316
https://security.paloaltonetworks.com/CVE-2026-0318
https://security.paloaltonetworks.com/CVE-2026-0319
https://security.paloaltonetworks.com/CVE-2026-0320
https://security.paloaltonetworks.com/CVE-2026-0321
https://security.paloaltonetworks.com/CVE-2026-0322
https://security.paloaltonetworks.com/PAN-SA-2026-0013

Reports indicated that remote code execution vulnerabilities (CVE-2026-0322, CVE-2026-85046 and CVE-2026-87491) are being exploited in the wild and indicated that proof-of-concept (PoC) exploit codes for multiple vulnerabilities (CVE-2026-95301, CVE-2026-95330, CVE-2026-95362, CVE-2026-95366, CVE-2026-95375 and CVE-2026-95376) are available. System administrators are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

 

Affected Systems:

  • Checkov by Prisma Cloud prior to version 3.3.25
  • Cortex XSIAM OS Query prior to version 1.0.17
  • Cortex XSOAR OS Query prior to version 1.0.17
  • GlobalProtect App on macOS versions 6.2 prior to 6.2.8-h15
  • GlobalProtect App on macOS versions 6.3 prior to 6.3.3-h16
  • GlobalProtect App on Windows versions 6.0 prior to 6.0.15
  • GlobalProtect App on Windows versions 6.2 prior to 6.2.8-h15
  • GlobalProtect App on Windows versions 6.3 prior to 6.3.3-h16
  • PAN-OS versions 10.2 prior to 10.2.10-h41, 10.2.13-h26, 10.2.16-h11, 10.2.18-h12, 10.2.7-h38
  • PAN-OS versions 11.1 prior to 11.1.10-h35, 11.1.13-h15, 11.1.16-h3, 11.1.4-h37, 11.1.6-h39, 11.1.7-h11
  • PAN-OS versions 11.2 prior to 11.2.10-h15, 11.2.13-h3, 11.2.16, 11.2.4-h22, 11.2.7-h21
  • PAN-OS versions 12.1 prior to 12.1.10-h2, 12.1.4-h12, 12.1.7-h8
  • PAN-OS versions 12.2 prior to 12.2.4
  • PAN-OS on Panorama versions 11.1 prior to 11.1.10-h35, 11.1.13-h15, 11.1.16-h3, 11.1.4-h37, 11.1.6-h39, 11.1.7-h11
  • PAN-OS on Panorama versions 11.2 prior to 11.2.10-h15, 11.2.13-h3, 11.2.15, 11.2.4-h22, 11.2.7-h21
  • PAN-OS on Panorama versions 12.1 prior to 12.1.10-h2, 12.1.4-h12, 12.1.7-h8
  • PAN-OS on Panorama versions 12.2 prior to 12.2.4
  • Prisma Access versions 10.2 prior to 10.2.10-h41
  • Prisma Access versions 11.2 prior to 11.2.7-h21
  • Prisma Access versions 12.1 prior to 12.1.7-h8
  • Prisma Browser versions prior to 152.8.5.83

For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.

 

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution, denial of service, elevation of privilege, information disclosure, security restriction bypass, spoofing or tampering on an affected system.

 

Recommendation:

Patches for affected systems are now available. For detailed information of the available patches, please refer to the section "Solution" of corresponding security advisory at vendor's website.

System administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

 

More Information:

  • https://security.paloaltonetworks.com/CVE-2026-0311
  • https://security.paloaltonetworks.com/CVE-2026-0312
  • https://security.paloaltonetworks.com/CVE-2026-0313
  • https://security.paloaltonetworks.com/CVE-2026-0314
  • https://security.paloaltonetworks.com/CVE-2026-0315
  • https://security.paloaltonetworks.com/CVE-2026-0316
  • https://security.paloaltonetworks.com/CVE-2026-0318
  • https://security.paloaltonetworks.com/CVE-2026-0319
  • https://security.paloaltonetworks.com/CVE-2026-0320
  • https://security.paloaltonetworks.com/CVE-2026-0321
  • https://security.paloaltonetworks.com/CVE-2026-0322
  • https://security.paloaltonetworks.com/PAN-SA-2026-0013
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0311 (to CVE-2026-0316)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0318 (to CVE-2026-0322)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-85042 (to CVE-2026-85053)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87429 (to CVE-2026-87658)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91708 (to CVE-2026-91749)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93372 (to CVE-2026-93387)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-95274 (to CVE-2026-95376)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-95380 (to CVE-2026-95382)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-95384 (to CVE-2026-95385)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102299 (to CVE-2026-102321)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102323 (to CVE-2026-102331)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106185
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106196
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106244
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106393
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106401
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106404
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106408
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106414
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-106426


Tag: Palo Alto
Tags