Palo Alto Networks
Palo Alto Adds Prisma Cloud and SCM to Brotli Remediation
Palo Alto adds Prisma Cloud and SCM to remediated Brotli services. Recheck PAN-OS scope, patch client software, validate controls, and retain evidence.
Palo Alto PAN-OS Management RCE Is Listed as Attacked
Palo Alto confirms limited CVE-2026-0322 exploitation and lists three associated IPs. Patch PAN-OS, investigate management access, and retain evidence.
Palo Alto Revises Three PAN-OS Advisories With Available Fixes
Palo Alto revised three PAN-OS advisories after fixed builds became available. Map each product and branch, update, validate, and retain evidence.
CVE-2026-0300: PAN-OS User-ID Authentication Portal unauthenticated root RCE
PAN-OS User-ID Authentication Portal exposure can allow unauthenticated root code execution on affected PA-Series and VM-Series firewalls. Check portal and ingress-interface Response Pages settings; Prisma Access, Cloud NGFW and Panorama are outside this issue's scope.
CVE-2026-0257: PAN-OS GlobalProtect authentication bypass
GlobalProtect authentication-override cookies can permit unauthorized VPN connections under the affected certificate configuration. Coordinate fixes across every cookie-generating and accepting portal or gateway, including hybrid Prisma Access deployments, and investigate sessions separately from patching.
Palo Alto Updates GlobalProtect CVE-2026-0307 Fixed Builds
Palo Alto revises GlobalProtect CVE-2026-0307 fixed builds. Update both clients and infrastructure, validate the paired fix, and retain evidence.