CVE-2026-0284

Published: Jul 9, 2026Modified: Jul 13, 2026

4.7

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:L/SA:L/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Amber

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:L/SA:L/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:AmberShow less

Source: psirt@paloaltonetworks.com (Secondary)

Description

An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to inject malicious XML content, potentially leading to information disclosure or corruption of internal LSVPN satellite data. Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

Affected (203)

Products: Paloaltonetworks: Pan Os

Paloaltonetworks

1 product

Pan Os

Configuration A

77 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 10.2.0 to 10.2.7
Paloaltonetworks Pan Os	From 10.2.11 to 10.2.13
Paloaltonetworks Pan Os	From 10.2.14 to 10.2.16
Paloaltonetworks Pan Os	From 10.2.8 to 10.2.10
Paloaltonetworks Pan Os	Version 10.2.10
Paloaltonetworks Pan Os	Version 10.2.10 h10
Paloaltonetworks Pan Os	Version 10.2.10 h11
Paloaltonetworks Pan Os	Version 10.2.10 h12
Paloaltonetworks Pan Os	Version 10.2.10 h13
Paloaltonetworks Pan Os	Version 10.2.10 h14
Paloaltonetworks Pan Os	Version 10.2.10 h17
Paloaltonetworks Pan Os	Version 10.2.10 h18
Paloaltonetworks Pan Os	Version 10.2.10 h1
Paloaltonetworks Pan Os	Version 10.2.10 h21
Paloaltonetworks Pan Os	Version 10.2.10 h27
Paloaltonetworks Pan Os	Version 10.2.10 h2
Paloaltonetworks Pan Os	Version 10.2.10 h30
Paloaltonetworks Pan Os	Version 10.2.10 h31
Paloaltonetworks Pan Os	Version 10.2.10 h36
Paloaltonetworks Pan Os	Version 10.2.10 h37
Paloaltonetworks Pan Os	Version 10.2.10 h3
Paloaltonetworks Pan Os	Version 10.2.10 h4
Paloaltonetworks Pan Os	Version 10.2.10 h5
Paloaltonetworks Pan Os	Version 10.2.10 h6
Paloaltonetworks Pan Os	Version 10.2.10 h7
Paloaltonetworks Pan Os	Version 10.2.13
Paloaltonetworks Pan Os	Version 10.2.13 h10
Paloaltonetworks Pan Os	Version 10.2.13 h15
Paloaltonetworks Pan Os	Version 10.2.13 h16
Paloaltonetworks Pan Os	Version 10.2.13 h18
Paloaltonetworks Pan Os	Version 10.2.13 h1
Paloaltonetworks Pan Os	Version 10.2.13 h21
Paloaltonetworks Pan Os	Version 10.2.13 h22
Paloaltonetworks Pan Os	Version 10.2.13 h2
Paloaltonetworks Pan Os	Version 10.2.13 h3
Paloaltonetworks Pan Os	Version 10.2.13 h4
Paloaltonetworks Pan Os	Version 10.2.13 h5
Paloaltonetworks Pan Os	Version 10.2.13 h7
Paloaltonetworks Pan Os	Version 10.2.16
Paloaltonetworks Pan Os	Version 10.2.16 h1
Paloaltonetworks Pan Os	Version 10.2.16 h4
Paloaltonetworks Pan Os	Version 10.2.16 h6
Paloaltonetworks Pan Os	Version 10.2.16 h7
Paloaltonetworks Pan Os	Version 10.2.16 h8
Paloaltonetworks Pan Os	Version 10.2.17
Paloaltonetworks Pan Os	Version 10.2.18 h1
Paloaltonetworks Pan Os	Version 10.2.18 h5
Paloaltonetworks Pan Os	Version 10.2.18 h6
Paloaltonetworks Pan Os	Version 10.2.18 h7
Paloaltonetworks Pan Os	Version 10.2.7
Paloaltonetworks Pan Os	Version 10.2.7 h10
Paloaltonetworks Pan Os	Version 10.2.7 h11
Paloaltonetworks Pan Os	Version 10.2.7 h12
Paloaltonetworks Pan Os	Version 10.2.7 h13
Paloaltonetworks Pan Os	Version 10.2.7 h14
Paloaltonetworks Pan Os	Version 10.2.7 h15
Paloaltonetworks Pan Os	Version 10.2.7 h16
Paloaltonetworks Pan Os	Version 10.2.7 h17
Paloaltonetworks Pan Os	Version 10.2.7 h18
Paloaltonetworks Pan Os	Version 10.2.7 h19
Paloaltonetworks Pan Os	Version 10.2.7 h1
Paloaltonetworks Pan Os	Version 10.2.7 h20
Paloaltonetworks Pan Os	Version 10.2.7 h21
Paloaltonetworks Pan Os	Version 10.2.7 h22
Paloaltonetworks Pan Os	Version 10.2.7 h23
Paloaltonetworks Pan Os	Version 10.2.7 h24
Paloaltonetworks Pan Os	Version 10.2.7 h2
Paloaltonetworks Pan Os	Version 10.2.7 h32
Paloaltonetworks Pan Os	Version 10.2.7 h34
Paloaltonetworks Pan Os	Version 10.2.7 h35
Paloaltonetworks Pan Os	Version 10.2.7 h3
Paloaltonetworks Pan Os	Version 10.2.7 h4
Paloaltonetworks Pan Os	Version 10.2.7 h5
Paloaltonetworks Pan Os	Version 10.2.7 h6
Paloaltonetworks Pan Os	Version 10.2.7 h7
Paloaltonetworks Pan Os	Version 10.2.7 h8
Paloaltonetworks Pan Os	Version 10.2.7 h9

Configuration B

69 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 11.1.0 to 11.1.4
Paloaltonetworks Pan Os	From 11.1.11 to 11.1.13
Paloaltonetworks Pan Os	From 11.1.14 to 11.1.16
Paloaltonetworks Pan Os	From 11.1.8 to 11.1.10
Paloaltonetworks Pan Os	Version 11.1.10
Paloaltonetworks Pan Os	Version 11.1.10 h10
Paloaltonetworks Pan Os	Version 11.1.10 h12
Paloaltonetworks Pan Os	Version 11.1.10 h1
Paloaltonetworks Pan Os	Version 11.1.10 h21
Paloaltonetworks Pan Os	Version 11.1.10 h25
Paloaltonetworks Pan Os	Version 11.1.10 h26
Paloaltonetworks Pan Os	Version 11.1.10 h27
Paloaltonetworks Pan Os	Version 11.1.10 h28
Paloaltonetworks Pan Os	Version 11.1.10 h4
Paloaltonetworks Pan Os	Version 11.1.10 h5
Paloaltonetworks Pan Os	Version 11.1.10 h7
Paloaltonetworks Pan Os	Version 11.1.10 h9
Paloaltonetworks Pan Os	Version 11.1.13
Paloaltonetworks Pan Os	Version 11.1.13 h1
Paloaltonetworks Pan Os	Version 11.1.13 h2
Paloaltonetworks Pan Os	Version 11.1.13 h3
Paloaltonetworks Pan Os	Version 11.1.13 h5
Paloaltonetworks Pan Os	Version 11.1.13 h6
Paloaltonetworks Pan Os	Version 11.1.13 h7
Paloaltonetworks Pan Os	Version 11.1.13 h8
Paloaltonetworks Pan Os	Version 11.1.4
Paloaltonetworks Pan Os	Version 11.1.4 h10
Paloaltonetworks Pan Os	Version 11.1.4 h11
Paloaltonetworks Pan Os	Version 11.1.4 h12
Paloaltonetworks Pan Os	Version 11.1.4 h13
Paloaltonetworks Pan Os	Version 11.1.4 h15
Paloaltonetworks Pan Os	Version 11.1.4 h17
Paloaltonetworks Pan Os	Version 11.1.4 h18
Paloaltonetworks Pan Os	Version 11.1.4 h1
Paloaltonetworks Pan Os	Version 11.1.4 h25
Paloaltonetworks Pan Os	Version 11.1.4 h27
Paloaltonetworks Pan Os	Version 11.1.4 h2
Paloaltonetworks Pan Os	Version 11.1.4 h32
Paloaltonetworks Pan Os	Version 11.1.4 h33
Paloaltonetworks Pan Os	Version 11.1.4 h34
Paloaltonetworks Pan Os	Version 11.1.4 h3
Paloaltonetworks Pan Os	Version 11.1.4 h4
Paloaltonetworks Pan Os	Version 11.1.4 h5
Paloaltonetworks Pan Os	Version 11.1.4 h6
Paloaltonetworks Pan Os	Version 11.1.4 h7
Paloaltonetworks Pan Os	Version 11.1.4 h8
Paloaltonetworks Pan Os	Version 11.1.4 h9
Paloaltonetworks Pan Os	Version 11.1.5
Paloaltonetworks Pan Os	Version 11.1.6
Paloaltonetworks Pan Os	Version 11.1.6 h10
Paloaltonetworks Pan Os	Version 11.1.6 h14
Paloaltonetworks Pan Os	Version 11.1.6 h17
Paloaltonetworks Pan Os	Version 11.1.6 h18
Paloaltonetworks Pan Os	Version 11.1.6 h19
Paloaltonetworks Pan Os	Version 11.1.6 h1
Paloaltonetworks Pan Os	Version 11.1.6 h20
Paloaltonetworks Pan Os	Version 11.1.6 h21
Paloaltonetworks Pan Os	Version 11.1.6 h22
Paloaltonetworks Pan Os	Version 11.1.6 h23
Paloaltonetworks Pan Os	Version 11.1.6 h25
Paloaltonetworks Pan Os	Version 11.1.6 h29
Paloaltonetworks Pan Os	Version 11.1.6 h2
Paloaltonetworks Pan Os	Version 11.1.6 h32
Paloaltonetworks Pan Os	Version 11.1.6 h33
Paloaltonetworks Pan Os	Version 11.1.6 h34
Paloaltonetworks Pan Os	Version 11.1.6 h3
Paloaltonetworks Pan Os	Version 11.1.6 h4
Paloaltonetworks Pan Os	Version 11.1.6 h6
Paloaltonetworks Pan Os	Version 11.1.6 h7

Configuration C

47 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 11.2.0 to 11.2.4
Paloaltonetworks Pan Os	From 11.2.11 to 11.2.13
Paloaltonetworks Pan Os	From 11.2.5 to 11.2.7
Paloaltonetworks Pan Os	From 11.2.8 to 11.2.10
Paloaltonetworks Pan Os	Version 11.2.10
Paloaltonetworks Pan Os	Version 11.2.10 h10
Paloaltonetworks Pan Os	Version 11.2.10 h1
Paloaltonetworks Pan Os	Version 11.2.10 h2
Paloaltonetworks Pan Os	Version 11.2.10 h3
Paloaltonetworks Pan Os	Version 11.2.10 h4
Paloaltonetworks Pan Os	Version 11.2.10 h5
Paloaltonetworks Pan Os	Version 11.2.10 h6
Paloaltonetworks Pan Os	Version 11.2.10 h7
Paloaltonetworks Pan Os	Version 11.2.10 h8
Paloaltonetworks Pan Os	Version 11.2.10 h9
Paloaltonetworks Pan Os	Version 11.2.4
Paloaltonetworks Pan Os	Version 11.2.4 h10
Paloaltonetworks Pan Os	Version 11.2.4 h11
Paloaltonetworks Pan Os	Version 11.2.4 h12
Paloaltonetworks Pan Os	Version 11.2.4 h14
Paloaltonetworks Pan Os	Version 11.2.4 h15
Paloaltonetworks Pan Os	Version 11.2.4 h17
Paloaltonetworks Pan Os	Version 11.2.4 h18
Paloaltonetworks Pan Os	Version 11.2.4 h1
Paloaltonetworks Pan Os	Version 11.2.4 h2
Paloaltonetworks Pan Os	Version 11.2.4 h3
Paloaltonetworks Pan Os	Version 11.2.4 h4
Paloaltonetworks Pan Os	Version 11.2.4 h5
Paloaltonetworks Pan Os	Version 11.2.4 h6
Paloaltonetworks Pan Os	Version 11.2.4 h7
Paloaltonetworks Pan Os	Version 11.2.4 h8
Paloaltonetworks Pan Os	Version 11.2.4 h9
Paloaltonetworks Pan Os	Version 11.2.7
Paloaltonetworks Pan Os	Version 11.2.7 h10
Paloaltonetworks Pan Os	Version 11.2.7 h11
Paloaltonetworks Pan Os	Version 11.2.7 h12
Paloaltonetworks Pan Os	Version 11.2.7 h13
Paloaltonetworks Pan Os	Version 11.2.7 h14
Paloaltonetworks Pan Os	Version 11.2.7 h15
Paloaltonetworks Pan Os	Version 11.2.7 h16
Paloaltonetworks Pan Os	Version 11.2.7 h17
Paloaltonetworks Pan Os	Version 11.2.7 h1
Paloaltonetworks Pan Os	Version 11.2.7 h2
Paloaltonetworks Pan Os	Version 11.2.7 h3
Paloaltonetworks Pan Os	Version 11.2.7 h4
Paloaltonetworks Pan Os	Version 11.2.7 h7
Paloaltonetworks Pan Os	Version 11.2.7 h8

Configuration D

10 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 12.1.2 to 12.1.4
Paloaltonetworks Pan Os	From 12.1.5 to 12.1.7
Paloaltonetworks Pan Os	Version 12.1.4
Paloaltonetworks Pan Os	Version 12.1.4 h2
Paloaltonetworks Pan Os	Version 12.1.4 h3
Paloaltonetworks Pan Os	Version 12.1.4 h5
Paloaltonetworks Pan Os	Version 12.1.4 h6
Paloaltonetworks Pan Os	Version 12.1.4 h7
Paloaltonetworks Pan Os	Version 12.1.7
Paloaltonetworks Pan Os	Version 12.1.7 h1

Related CWEs

CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

References (1)

https://security.paloaltonetworks.com/CVE-2026-0284

Source: psirt@paloaltonetworks.com

Vendor Advisory

Timeline

No history available yet.