Cloud ngfw
This hub aggregates every CVE we track for Cloud ngfw, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
107
CVEs tracked
11
Critical
37
High
9
In CISA KEV
Severity distribution
MEDIUM50HIGH37CRITICAL11LOW6
Monthly trend
2
10
1
5
3
3
6
4
3
0
1
0
2
1
0
1
2
0
0
9
4
10
1
3
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Cloud ngfw.
- CVE-2026-0308PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
- CVE-2026-0309PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration
- CVE-2026-0310PAN-OS: Buffer Overflow Vulnerability via XML Processing
- CVE-2026-0301PAN-OS: Information Disclosure Vulnerability in URL Filtering7.5
- CVE-2026-0279PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities6.1
- CVE-2026-0280PAN-OS: IPv6 Firewall Policy Bypass7.2
- CVE-2026-0281PAN-OS: Information Disclosure Vulnerability in Management Web Interface7.1
- CVE-2026-0282PAN-OS: File Deletion Vulnerability in Management Web Interface6.5
- CVE-2026-0283PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)7.2
- CVE-2026-0284PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)9.9
- CVE-2026-0285PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface4.9
- CVE-2026-0286PAN-OS: Authenticated Command Injection in CLI7.2
- CVE-2026-0287PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing7.5
- CVE-2026-0288PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent7.5
- CVE-2026-0273PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI7.2
Product normalization is registry-driven with AI assist and human review. How it works