CVE-2026-0279

Description

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payload. The security risk posed by this issue is minimized when the management interface and access to the User-ID™ Authentication Portal is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW is not affected by this vulnerability.

CVSS breakdown

Affected products

• Palo Alto Networks / Cloud NGFWAll – All
• Palo Alto Networks / pan-os12.1.7 – 12.1.7
• Palo Alto Networks / pan-os12.1.6 – 12.1.6
• Palo Alto Networks / pan-os12.1.5 – 12.1.5
• Palo Alto Networks / pan-os12.1.4 – 12.1.4
• Palo Alto Networks / pan-os12.1.3 – 12.1.3
• Palo Alto Networks / pan-os12.1.2 – 12.1.2
• Palo Alto Networks / pan-os11.2.12 – 11.2.12
• Palo Alto Networks / pan-os11.2.11 – 11.2.11
• Palo Alto Networks / pan-os11.2.10 – 11.2.10
• Palo Alto Networks / pan-os11.2.9 – 11.2.9
• Palo Alto Networks / pan-os11.2.8 – 11.2.8
• Palo Alto Networks / pan-os11.2.7 – 11.2.7
• Palo Alto Networks / pan-os11.2.7 – 11.2.7
• Palo Alto Networks / pan-os11.2.7 – 11.2.7
• Palo Alto Networks / pan-os11.2.7 – 11.2.7
• Palo Alto Networks / pan-os11.2.7 – 11.2.7
• Palo Alto Networks / pan-os11.2.7 – 11.2.7
• Palo Alto Networks / pan-os11.2.7 – 11.2.7
• Palo Alto Networks / pan-os11.2.7 – 11.2.7
• Palo Alto Networks / pan-os11.2.7 – 11.2.7
• Palo Alto Networks / pan-os11.2.7 – 11.2.7
• Palo Alto Networks / pan-os11.2.7 – 11.2.7
• Palo Alto Networks / pan-os11.2.7 – 11.2.7
• Palo Alto Networks / pan-os11.2.7 – 11.2.7
• Palo Alto Networks / pan-os11.2.7 – 11.2.7
• Palo Alto Networks / pan-os11.2.7 – 11.2.7
• Palo Alto Networks / pan-os11.2.6 – 11.2.6
• Palo Alto Networks / pan-os11.2.5 – 11.2.5
• Palo Alto Networks / pan-os11.2.4 – 11.2.4
• Palo Alto Networks / pan-os11.2.3 – 11.2.3
• Palo Alto Networks / pan-os11.2.2 – 11.2.2
• Palo Alto Networks / pan-os11.2.1 – 11.2.1
• Palo Alto Networks / pan-os11.2.0 – 11.2.0
• Palo Alto Networks / pan-os11.1.15 – 11.1.15
• Palo Alto Networks / pan-os11.1.14 – 11.1.14
• Palo Alto Networks / pan-os11.1.13 – 11.1.13
• Palo Alto Networks / pan-os11.1.12 – 11.1.12
• Palo Alto Networks / pan-os11.1.11 – 11.1.11
• Palo Alto Networks / pan-os11.1.10 – 11.1.10
• Palo Alto Networks / pan-os11.1.9 – 11.1.9
• Palo Alto Networks / pan-os11.1.8 – 11.1.8
• Palo Alto Networks / pan-os11.1.6 – 11.1.6
• Palo Alto Networks / pan-os11.1.5 – 11.1.5
• Palo Alto Networks / pan-os11.1.4 – 11.1.4
• Palo Alto Networks / pan-os11.1.3 – 11.1.3
• Palo Alto Networks / pan-os11.1.2 – 11.1.2
• Palo Alto Networks / pan-os11.1.1 – 11.1.1
• Palo Alto Networks / pan-os11.1.0 – 11.1.0
• Palo Alto Networks / pan-os10.2.18 – 10.2.18
• Palo Alto Networks / pan-os10.2.17 – 10.2.17
• Palo Alto Networks / pan-os10.2.16 – 10.2.16
• Palo Alto Networks / pan-os10.2.15 – 10.2.15
• Palo Alto Networks / pan-os10.2.14 – 10.2.14
• Palo Alto Networks / pan-os10.2.13 – 10.2.13
• Palo Alto Networks / pan-os10.2.12 – 10.2.12
• Palo Alto Networks / pan-os10.2.11 – 10.2.11
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.10 – 10.2.10
• Palo Alto Networks / pan-os10.2.9 – 10.2.9
• Palo Alto Networks / pan-os10.2.8 – 10.2.8
• Palo Alto Networks / pan-os10.2.7 – 10.2.7
• Palo Alto Networks / pan-os10.2.6 – 10.2.6
• Palo Alto Networks / pan-os10.2.5 – 10.2.5
• Palo Alto Networks / pan-os10.2.4 – 10.2.4
• Palo Alto Networks / pan-os10.2.3 – 10.2.3
• Palo Alto Networks / pan-os10.2.2 – 10.2.2
• Palo Alto Networks / pan-os10.2.1 – 10.2.1
• Palo Alto Networks / pan-os10.2.0 – 10.2.0
• Palo Alto Networks / Prisma Access12.1.0 – 12.1.8
• Palo Alto Networks / Prisma Access11.2.0 – 11.2.0
• Palo Alto Networks / Prisma Access10.2.0 – 10.2.0
• paloaltonetworks / pan-os10.2.0 – 11.1.16

References

• MISChttps://security.paloaltonetworks.com/CVE-2026-0279