Vulnerability in Palo Alto Networks Cloud Ngfw
CVE-2026-0281
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to obtain web session tokens. This requires a legitimate user to first click on a malicious link provided by the attacker. The security risk posed by this issue is minimized by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N.
EPSS exploit prediction
EPSS: 0.003 (19.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 19th percentile — 19.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- Palo Alto Networks Cloud Ngfw — versions All
- Palo Alto Networks Pan-Os — versions 12.1.0, 11.2.0, 11.1.0
- Palo Alto Networks Prisma Access — versions All
- Paloaltonetworks Pan-Os
Weakness classification (CWE)
References
- security.paloaltonetworks.com/CVE-2026-0281 (vendor-advisory, Vendor Advisory)
- 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Frequently asked questions
- What is CVE-2026-0281?
- CVE-2026-0281 is a high-severity vulnerability in Palo Alto Networks Cloud Ngfw, classified under Use of Cache Containing Sensitive Information. CVSS score: 7.1/10. Published 2026-07-09.
- How severe is CVE-2026-0281?
- High severity. CVSS v3 base score is 7.1 out of 10.