Palo Alto Networks Security Advisories

Affected Environment
PAN-OS, GlobalProtect App, Prisma Access, Prisma Access Agent, Prisma Browser, and Cortex XDR Broker VM deployments.

Threat Overview
Multiple vulnerabilities enable buffer overflow, command injection, XSS, privilege escalation, and endpoint DLP bypass across products.

Exposure Timeline
Published 10 September 2026; highest CVSS is 7.7 via Chromium updates, with no critical rated flaws.

Attack Surface
Management and dataplane interfaces, GlobalProtect app across platforms, and Prisma Access Agent DLP enforcement.

Technical Root Cause
XML processing buffer overflow, Luna HSM CLI command injection, stored XSS, and local privilege escalation weaknesses.

Exploitation Pathway
Unauthenticated network attacker triggers buffer overflow, or local user escalates privileges or bypasses DLP controls.