CVE-2026-0284

paloaltonetworks pan-os

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2026-0284

Katalog CVE

CVSS 9.9 · Critical EPSS 0,46%

Kerentanan Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') pada paloaltonetworks pan-os. Skor CVSS 3.1 9.9 (Critical) menurut NVD.

Deskripsi (NVD)

An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to inject malicious XML content, potentially leading to information disclosure or corruption of internal LSVPN satellite data. Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

Rincian

Terbit di NVD
9 Juli 2026
Terakhir diubah
11 Agustus 2026
Status NVD
Modified
CVSS 3.1
9.9 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
EPSS (30 hari)
0,46% peluang dieksploitasi; lebih tinggi dari 38,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
paloaltonetworks pan-os Versi 10.2.0 hingga sebelum 10.2.7
paloaltonetworks pan-os Versi 10.2.8 hingga sebelum 10.2.10
paloaltonetworks pan-os Versi 10.2.11 hingga sebelum 10.2.13
paloaltonetworks pan-os Versi 10.2.14 hingga sebelum 10.2.16
paloaltonetworks pan-os Versi 10.2.7
paloaltonetworks pan-os Versi 10.2.7 h1
paloaltonetworks pan-os Versi 10.2.7 h10
paloaltonetworks pan-os Versi 10.2.7 h11
paloaltonetworks pan-os Versi 10.2.7 h12
paloaltonetworks pan-os Versi 10.2.7 h13
paloaltonetworks pan-os Versi 10.2.7 h14
paloaltonetworks pan-os Versi 10.2.7 h15
paloaltonetworks pan-os Versi 10.2.7 h16
paloaltonetworks pan-os Versi 10.2.7 h17
paloaltonetworks pan-os Versi 10.2.7 h18
paloaltonetworks pan-os Versi 10.2.7 h19
paloaltonetworks pan-os Versi 10.2.7 h2
paloaltonetworks pan-os Versi 10.2.7 h20
paloaltonetworks pan-os Versi 10.2.7 h21
paloaltonetworks pan-os Versi 10.2.7 h22
paloaltonetworks pan-os Versi 10.2.7 h23
paloaltonetworks pan-os Versi 10.2.7 h24
paloaltonetworks pan-os Versi 10.2.7 h3
paloaltonetworks pan-os Versi 10.2.7 h32
paloaltonetworks pan-os Versi 10.2.7 h34
paloaltonetworks pan-os Versi 10.2.7 h35
paloaltonetworks pan-os Versi 10.2.7 h4
paloaltonetworks pan-os Versi 10.2.7 h5
paloaltonetworks pan-os Versi 10.2.7 h6
paloaltonetworks pan-os Versi 10.2.7 h7
paloaltonetworks pan-os Versi 10.2.7 h8
paloaltonetworks pan-os Versi 10.2.7 h9
paloaltonetworks pan-os Versi 10.2.10
paloaltonetworks pan-os Versi 10.2.10 h1
paloaltonetworks pan-os Versi 10.2.10 h10
paloaltonetworks pan-os Versi 10.2.10 h11
paloaltonetworks pan-os Versi 10.2.10 h12
paloaltonetworks pan-os Versi 10.2.10 h13
paloaltonetworks pan-os Versi 10.2.10 h14
paloaltonetworks pan-os Versi 10.2.10 h17
paloaltonetworks pan-os Versi 10.2.10 h18
paloaltonetworks pan-os Versi 10.2.10 h2
paloaltonetworks pan-os Versi 10.2.10 h21
paloaltonetworks pan-os Versi 10.2.10 h27
paloaltonetworks pan-os Versi 10.2.10 h3
paloaltonetworks pan-os Versi 10.2.10 h30
paloaltonetworks pan-os Versi 10.2.10 h31
paloaltonetworks pan-os Versi 10.2.10 h36
paloaltonetworks pan-os Versi 10.2.10 h37
paloaltonetworks pan-os Versi 10.2.10 h4
paloaltonetworks pan-os Versi 10.2.10 h5
paloaltonetworks pan-os Versi 10.2.10 h6
paloaltonetworks pan-os Versi 10.2.10 h7
paloaltonetworks pan-os Versi 10.2.13
paloaltonetworks pan-os Versi 10.2.13 h1
paloaltonetworks pan-os Versi 10.2.13 h10
paloaltonetworks pan-os Versi 10.2.13 h15
paloaltonetworks pan-os Versi 10.2.13 h16
paloaltonetworks pan-os Versi 10.2.13 h18
paloaltonetworks pan-os Versi 10.2.13 h2

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 203 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.