paloaltonetworks
3 records · 2 with a public proof-of-concept
Disclosed vulnerabilities where the NVD names paloaltonetworks as an affected vendor, highest CVSS first.
- CRITICAL 9.8CVE-2026-109618public PoC
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The su…
php · ruggedcom ape1808 firmware · ruggedcom ape1808 · pan-os · panorama m-200 · panorama m-300
- HIGH 8.1CVE-2026-109619public PoC
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subse…
php · ruggedcom ape1808 firmware · ruggedcom ape1808 · pan-os · panorama m-200 · panorama m-300
- HIGH 7.2CVE-2026-0322
A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by t…
pan-os