Tracker / CVE-2026-0284
CVE-2026-0284
Critical 9.9
An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to inject malicious XML content, potentially leading to information disclosure or corruption of internal LSVPN satellite data. Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.
Affected products and versions
| paloaltonetworks | pan-os |
|---|---|
| paloaltonetworks | pan-os · 10.2.0 → 10.2.7 |
| paloaltonetworks | pan-os · 10.2.11 → 10.2.13 |
| paloaltonetworks | pan-os · 10.2.14 → 10.2.16 |
| paloaltonetworks | pan-os · 10.2.8 → 10.2.10 |
| paloaltonetworks | pan-os · 11.1.0 → 11.1.4 |
| paloaltonetworks | pan-os · 11.1.11 → 11.1.13 |
| paloaltonetworks | pan-os · 11.1.14 → 11.1.16 |
| paloaltonetworks | pan-os · 11.1.8 → 11.1.10 |
| paloaltonetworks | pan-os · 11.2.0 → 11.2.4 |
| paloaltonetworks | pan-os · 11.2.11 → 11.2.13 |
| paloaltonetworks | pan-os · 11.2.5 → 11.2.7 |
| paloaltonetworks | pan-os · 11.2.8 → 11.2.10 |
| paloaltonetworks | pan-os · 12.1.2 → 12.1.4 |
| paloaltonetworks | pan-os · 12.1.5 → 12.1.7 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.