Cloud ngfw

This hub aggregates every CVE we track for Cloud ngfw, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Cloud ngfw.

• CVE-2026-0279PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities6.1Jul 9, 2026
• CVE-2026-0280PAN-OS: IPv6 Firewall Policy Bypass7.2Jul 9, 2026
• CVE-2026-0281PAN-OS: Information Disclosure Vulnerability in Management Web Interface7.1Jul 9, 2026
• CVE-2026-0282PAN-OS: File Deletion Vulnerability in Management Web Interface6.5Jul 9, 2026
• CVE-2026-0283PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)7.2Jul 9, 2026
• CVE-2026-0284PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)9.9Jul 9, 2026
• CVE-2026-0285PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface4.9Jul 9, 2026
• CVE-2026-0286PAN-OS: Authenticated Command Injection in CLI7.2Jul 9, 2026
• CVE-2026-0287PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing7.5Jul 9, 2026
• CVE-2026-0288PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent7.5Jul 8, 2026
• CVE-2026-0273PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI7.2Jun 10, 2026
• CVE-2026-0272PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)7.2Jun 10, 2026
• CVE-2026-0269PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing5.7Jun 10, 2026
• CVE-2026-0266PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface4.8Jun 10, 2026
• CVE-2026-0256PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface4.8May 13, 2026