CYBERSECURITYTRACKER
Permanent story citation

Palo Alto Networks security advisory (AV26-905)

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 6960

As cited

Copy frozen at (site build).

vulnerabilities

Palo Alto Networks security advisory (AV26-905)

Palo Alto Networks released security advisory AV26-905 on September 10, 2026, addressing vulnerabilities across Cloud NGFW, PAN-OS, Prisma Access, and Prisma Browser. The advisory includes CVE-2026-0310, a buffer overflow vulnerability in PAN-OS triggered via XML processing, and references a Chromium monthly update for September 2026.

Why it matters: Organizations running Palo Alto Networks products must review the advisory, identify affected versions, and apply updates to remediate CVE-2026-0310 and Chromium vulnerabilities that could lead to system compromise.

VendorsMicrosoftAmazon Web ServicesPalo Alto Networks
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Palo Alto Networks security advisory (AV26-905)

Palo Alto Networks disclosed multiple vulnerabilities affecting Cloud NGFW, PAN-OS, Prisma Access, and Prisma Browser as of September 10, 2026. CVE-2026-0310, a buffer overflow vulnerability in PAN-OS via XML processing, carries a CVSS score of 7.2. Updates are available for affected products, including Prisma Browser versions prior to 151.26.5.170.

Why it matters: Organizations running Palo Alto Networks firewalls and Prisma products should apply available patches immediately to address the buffer overflow vulnerability that could enable remote code execution.

VendorsMicrosoftAmazon Web ServicesPalo Alto Networks
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary