- 8/2026
- High
Palo Alto has released security updates to fix several vulnerabilities affecting multiple Palo Alto products.
The addressed vulnerabilities could allow the attacker to perform denial of service attacks, bypass security restrictions, expose user credentials, obtain sensitive information, escalate privileges, execute arbitrary commands, and gain access to the affected product.
Sample of the addressed vulnerabilities:
1. PAN-OS Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal Vulnerability (CVE-2026-0227):
- CVSS: 7.7
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Consequences: Denial of Service
2. PAN-OS Improper Neutralization of Input in the Management Web Interface Vulnerability (CVE-2025-4615):
- CVSS: 4.5
- Attack Vector: Adjacent
- Attack Complexity: Low
- Privileges Required: High
- User Interaction: None
- Consequences: Bypass Security
Sample of the affected products:
- PAN-OS 12.1.
- User-ID Credential Agent.
- Prisma Access.
Vulnerabilities
- CVE-2026-0227
- CVE-2025-4615
- CVE-2025-2181
- CVE-2025-2183
- CVE-2025-4235
- CVE-2025-2180
- CVE-2025-4619
- CVE-2025-2179
- CVE-2025-4614
- CVE-2025-4234
- CVE-2025-2182
- CVE-2025-2184
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.