CVEFinder.io

CVE-2026-0279

🔶 medium
🔍 Scan for this CVE
Summary

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payload. The security risk posed by this issue is minimized when the management interface and access to the User-ID™ Authentication Portal is restricted to only trusted internal IP addresses according to o

Description

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payload.


The security risk posed by this issue is minimized when the management interface and access to the User-ID™ Authentication Portal is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .

This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).

Cloud NGFW is not affected by this vulnerability.

CVSS Score
6.1
Medium
EPSS Score
0.6
Exploit Probability
Published Date
2026-07-09
First Seen: 2026-07-10
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 38.7% of all 335,187 vulnerabilities in our database.

#205,504
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jul 9, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
🏆 Discovered By
our internal security research teams
SSVC data provided by CISA
Last Modified 2026-07-13
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS Vector 4.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
CWE IDs (Weakness Types)
CWE-79

📦 Affected Products 3

Vendor Product Status Affected Versions
paloaltonetworks pan-os Affected
> 10.2.0 < 11.1.16
paloaltonetworks pan-os Affected
> 11.2.0 < 11.2.13
paloaltonetworks pan-os Affected
> 12.1.0 < 12.1.8

🔗 References 1

https://security.paloaltonetworks.com/CVE-2026-0279
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-0280 ⚠️ high 7.2 0.3 An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthentica... 2026-07-09
CVE-2026-0281 ⚠️ high 7.1 0.3 An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with... 2026-07-09
CVE-2026-0282 🔶 medium 6.5 0.3 A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network a... 2026-07-09
CVE-2026-0283 ⚠️ high 7.2 0.3 An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software a... 2026-07-09
CVE-2026-0284 ⛔ critical 9.9 0.5 An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enab... 2026-07-09
CVE-2026-0285 🔶 medium 4.9 0.4 A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated admini... 2026-07-09
These CVEs affect the same products