


High
Palo Alto Networks
September 10, 2026
Multiple vulnerabilities enable buffer overflow, command injection, XSS, privilege escalation, and endpoint DLP bypass across products.
Palo Alto Networks
Apply vendor patch
PAN-OS, GlobalProtect App, Prisma Access, Prisma Access Agent, Prisma Browser, and Cortex XDR Broker VM deployments.
Successful exploitation may cause denial of service, root code execution, or bypassed DLP data exfiltration controls.
XML processing buffer overflow, Luna HSM CLI command injection, stored XSS, and local privilege escalation weaknesses.
Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.
Discuss Your Security ExposureExplore MDR for Palo AltoAssess your risk
Identify affected systems
Plan remediation
Practical, vendor-aligned guidance
Get expert support
From our 24/7 security team
Get the latest threat intelligence and security advisories from Smarttech247.
View All Threat UpdatesDownload the complete analysis, including detailed technical findings and references.
Palo Alto Networks Security Advisories.