Medium · CVSS 6.1
Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI or Web UI.
The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators and by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .
This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).
Cloud NGFW and Prisma Access® are not impacted by these vulnerabilities.
Published May 13, 2026 · Updated Oct 15, 2026
Medium · CVSS 4.8
A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a denial of service (DoS) condition.
Panorama, Cloud NGFW and Prisma® Access are not impacted by these vulnerabilities.
Published May 13, 2026 · Updated Oct 15, 2026
High · CVSS 7.8 · CISA KEV
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.
Panorama and Cloud NGFW are not impacted by these issues.
Published May 13, 2026 · Updated Oct 15, 2026
Medium · CVSS 4.4
A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface.
This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).
Cloud NGFW and Prisma® Access are not impacted by this vulnerability.
Published May 13, 2026 · Updated Oct 15, 2026
High · CVSS 8.5
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection.
This issue affects Event Tickets: from n/a through 5.29.5.
Published Sep 30, 2026 · Updated Oct 14, 2026
High · CVSS 8.8
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.7
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.
Published Sep 17, 2026 · Updated Oct 14, 2026
High · CVSS 8.2
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthorized attacker to perform spoofing over a network.
Published Sep 17, 2026 · Updated Oct 14, 2026
Critical · CVSS 10
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network.
Published Sep 17, 2026 · Updated Oct 14, 2026
Critical · CVSS 9.9
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network.
Published Sep 17, 2026 · Updated Oct 14, 2026
Critical · CVSS 10
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network.
Published Sep 17, 2026 · Updated Oct 14, 2026
Critical · CVSS 10
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
Published Sep 3, 2026 · Updated Oct 14, 2026
Critical · CVSS 9.3
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network.
Published Sep 3, 2026 · Updated Oct 14, 2026
Critical · CVSS 10
Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.
Published Sep 3, 2026 · Updated Oct 14, 2026
High · CVSS 7.4
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.
Published Sep 3, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.5
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Medium · CVSS 6.5
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 8.1
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.
Published Sep 18, 2026 · Updated Oct 14, 2026
High · CVSS 8.8
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
Published Sep 15, 2026 · Updated Oct 14, 2026
High · CVSS 7.4
Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Medium · CVSS 5.5
Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Medium · CVSS 5.5
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 8.1
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 8.8
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.5
Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Medium · CVSS 5.5
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 8.8
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
High · CVSS 7.8
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Medium · CVSS 4.6
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
Published Sep 8, 2026 · Updated Oct 14, 2026
