IM
IronMonkey Threat Research

CVE-2026-0279 MEDIUM

Published: 2026-07-09 | Last Modified: 2026-08-11 | Status: Modified

Description

Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payload. The security risk posed by this issue is minimized when the management interface and access to the User-ID™ Authentication Portal is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW is not affected by this vulnerability.

CVSS Metrics

Base Score: 6.1 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
ScopeCHANGED
Confidentiality ImpactLOW
Integrity ImpactLOW
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 2.8

Impact Score: 2.7

Base Score: 1.3 (LOW)

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

Attack VectorNETWORK
Attack ComplexityLOW
Attack RequirementsNONE
Privileges RequiredNONE
User InteractionPASSIVE
Vulnerability ConfidentialityLOW
Vulnerability IntegrityLOW
Vulnerability AvailabilityNONE
Subsequent ConfidentialityNONE
Subsequent IntegrityNONE
Subsequent AvailabilityNONE

Source: [email protected]

Type: Secondary

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-79

Affected Products

Vendor Product Version Update Type
paloaltonetworks pan-os * <built-in method update of dict object at 0x73cfe6a8b780> Operating System
paloaltonetworks pan-os * <built-in method update of dict object at 0x73d04ee30cc0> Operating System
paloaltonetworks pan-os * <built-in method update of dict object at 0x73d04ee31040> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

References

Notification
Message here