Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 1011 of 1013.
- CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability
- CVE-2026-0312 Checkov by Prisma Cloud: Path Traversal Vulnerabilities
- CVE-2026-0311 Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability
- CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing
- CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration
- CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
- CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities
- CVE-2026-0306 Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows
- CVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux
- CVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability
- CVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File
- CVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability
- CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering
- CVE-2026-0300 Palo Alto Networks PAN-OS Out-of-bounds Write
- CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities
- CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)
- CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
- CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
- CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
- CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation
- CVE-2026-0293 Prisma Access Agent: Anti-Tamper Protection Bypass on Windows
- CVE-2026-0292 Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows
- CVE-2026-0291 Prisma Access Agent: Authenticated Limited File Deletion on Linux
- CVE-2026-0290 Prisma Browser: Sensitive Information Disclosure Vulnerability
- CVE-2026-0289 Prisma Browser: Inappropriate Implementation in Account Protection
- CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent
- CVE-2026-0287 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing
- CVE-2026-0286 PAN-OS: Authenticated Command Injection in CLI
- CVE-2026-0285 PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface
- CVE-2026-0284 PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)
- CVE-2026-0283 PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)
- CVE-2026-0282 PAN-OS: File Deletion Vulnerability in Management Web Interface
- CVE-2026-0281 PAN-OS: Information Disclosure Vulnerability in Management Web Interface
- CVE-2026-0280 PAN-OS: IPv6 Firewall Policy Bypass
- CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities
- CVE-2026-0278 Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows
- CVE-2026-0277 Prisma Access Agent: Improper Certificate Validation on iOS
- CVE-2026-0276 Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability
- CVE-2026-0275 Prisma Browser: Local Privilege Escalation on macOS
- CVE-2026-0274 Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration
- CVE-2026-0273 PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI
- CVE-2026-0272 PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)
- CVE-2026-0271 Prisma Access Agent: Local Privilege Escalation by Authorized Users
- CVE-2026-0270 Cortex XSOAR: Path Traversal Vulnerability
- CVE-2026-0269 PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing
- CVE-2026-0268 Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux
- CVE-2026-0267 GlobalProtect App: Information Exposure Vulnerability on macOS
- CVE-2026-0266 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
- CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled
- CVE-2026-0264 PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution
- CVE-2026-0263 PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing
- CVE-2026-0262 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing
- CVE-2026-0261 PAN-OS: Authenticated Admin Command Injection Vulnerability
- CVE-2026-0259 WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)
- CVE-2026-0258 PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching
- CVE-2026-0257 Palo Alto Networks PAN-OS Authentication Bypass
- CVE-2026-0256 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
- CVE-2026-0251 GlobalProtect App: Local Privilege Escalation Vulnerabilities
- CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway
- CVE-2026-0249 GlobalProtect App: Certificate Validation Bypass Vulnerabilities
- CVE-2026-0248 Prisma Access Agent: Improper Certificate Validation Vulnerability
- CVE-2026-0247 Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities
- CVE-2026-0246 Prisma Access Agent: Local Privilege Escalation Vulnerability
- CVE-2026-0245 Prisma Access Agent: Information Disclosure Vulnerabilities
- CVE-2026-0244 Prisma SD-WAN: Improper Certificate Validation Vulnerability
- CVE-2026-0243 Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet
- CVE-2026-0242 Trust Protection Foundation: SQL Injection Vulnerability
- CVE-2026-0241 Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities
- CVE-2026-0240 Trust Protection Foundation: Sensitive Information Disclosure Vulnerability
- CVE-2026-0239 Chronosphere Chronocollector Information Disclosure Vulnerability
- CVE-2026-0238 Broker VM: Improper Input Validation in Broker VM Certificate and Key Fields
- CVE-2026-0237 Prisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass
- CVE-2026-0236 Prisma Browser: Code Injection Enables Security Controls Bypass
- CVE-2026-0235 Prisma Browser: Access and Data Rule Bypass
- CVE-2026-0234 Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration
- CVE-2026-0233 Autonomous Digital Experience Manager: Improper validation of ADEM certificate
- CVE-2026-0232 Cortex XDR Agent: Local Administrator can disable the agent on Windows
- CVE-2026-0231 Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability
- CVE-2026-0230 Cortex XDR Agent: Local Administrator can disable the agent on macOS
- CVE-2026-0229 PAN-OS: Denial of Service in Advanced DNS Security Feature
- CVE-2026-0228 PAN-OS: Improper Validation of Terminal Server Agent Certificate
- CVE-2026-0227 PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal
- CVE-2026-0209 Business logic in FlashArray
- CVE-2026-0207 Sensitive Information Logging Vulnerability in FlashBlade
- CVE-2026-0206 Memory corruption in SonicOS
- CVE-2026-0205 Path traversal in SonicOS
- CVE-2026-0204 Auth bypass in SonicOS
- CVE-2026-0203 Junos OS: Receipt of a specifically malformed ICMP packet causes an FPC restart
- CVE-2026-0200 Memory corruption in Android
- CVE-2026-0199 Memory corruption in Android
- CVE-2026-0198 Missing authorization in Android
- CVE-2026-0197 Information disclosure in Android
- CVE-2026-0194 Integer overflow in Android
- CVE-2026-0192 Missing authorization in Android
- CVE-2026-0189 Privilege escalation in Android
- CVE-2026-0187 Privilege escalation in Android
- CVE-2026-0186 Privilege escalation in Android
- CVE-2026-0183 Information disclosure in Android
- CVE-2026-0179 Missing authorization in Android
- CVE-2026-0177 Memory corruption in Android