our internal security research teams

47 kredili kayıt · son 12 ayda 47 · 1 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
32İzleyin	CVE-2026-0274İstismar yok	Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integrationpaloaltonetworks · cortex xsiam commvaultsecurityiq marketplace · CWE-1390 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,1	—	%0,3	10 Haz 2026
23İzleyin	CVE-2026-0271İstismar yok	Prisma Access Agent: Local Privilege Escalation by Authorized Userslinux · linux kernel · CWE-732 Yerel yetki yükseltme	Orta5,9	—	%0,1	10 Haz 2026
17İzleyin	CVE-2026-0268İstismar yok	Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linuxlinux · linux kernel · CWE-424	Orta4,4	—	%0,1	10 Haz 2026
19İzleyin	CVE-2026-0243İstismar yok	Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packetpaloaltonetworks · prisma sd-wan · CWE-606 Kimlik doğrulamasız	Orta4,9	—	%0,2	13 May 2026
26İzleyin	CVE-2026-0262İstismar yok	PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsingpaloaltonetworks · pan-os · CWE-754 Kimlik doğrulamasız	Orta6,6	—	%0,4	13 May 2026
24İzleyin	CVE-2026-0261İstismar yok	PAN-OS: Authenticated Admin Command Injection Vulnerabilitypaloaltonetworks · pan-os · CWE-78 RCE Komut enjeksiyonu	Orta6,1	—	%1,4	13 May 2026
20İzleyin	CVE-2026-0259İstismar yok	WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)paloaltonetworks · pan-os · CWE-73 Yol geçişi	Orta5,0	—	%0,3	13 May 2026
19İzleyin	CVE-2026-0258İstismar yok	PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetchingpaloaltonetworks · pan-os · CWE-918 Kimlik doğrulamasız SSRF	Orta4,8	—	%0,3	13 May 2026
90Hemen	CVE-2026-0257Silahlaştırılmış	PAN-OS: GlobalProtect Authentication Bypass Vulnerabilitiespaloaltonetworks · pan-os · CWE-565 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,8	KEV	%96,4	13 May 2026
17İzleyin	CVE-2026-0256İstismar yok	PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interfacepaloaltonetworks · pan-os · CWE-79 XSS	Orta4,4	—	%0,2	13 May 2026
23İzleyin	CVE-2026-0251İstismar yok	GlobalProtect App: Local Privilege Escalation Vulnerabilitiespaloaltonetworks · globalprotect · CWE-426 RCE Yerel yetki yükseltme	Orta5,9	—	%0,2	13 May 2026
20İzleyin	CVE-2026-0250İstismar yok	GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gatewaypaloaltonetworks · globalprotect · CWE-787 pre-auth RCE Bellek hatası	Orta5,2	—	%0,4	13 May 2026
24İzleyin	CVE-2026-0248İstismar yok	Prisma Access Agent: Improper Certificate Validation Vulnerabilitypaloaltonetworks · prisma access agent · CWE-295 Kimlik doğrulamasız Zayıf kripto	Orta6,2	—	%0,2	13 May 2026
23İzleyin	CVE-2026-0247İstismar yok	Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilitiespaloaltonetworks · prisma access agent · CWE-306 Kimlik doğrulama atlatma Yerel yetki yükseltme	Orta5,9	—	%0,2	13 May 2026
23İzleyin	CVE-2026-0246İstismar yok	Prisma Access Agent: Local Privilege Escalation Vulnerabilitypaloaltonetworks · prisma access agent · CWE-862 RCE Yerel yetki yükseltme Erişim denetimi (IDOR)	Orta5,9	—	%0,1	13 May 2026
17İzleyin	CVE-2026-0245İstismar yok	Prisma Access Agent: Information Disclosure Vulnerabilitiespaloaltonetworks · prisma access agent · CWE-200 Bilgi sızıntısı	Orta4,3	—	%0,1	13 May 2026
20İzleyin	CVE-2026-0244İstismar yok	Prisma SD-WAN: Improper Certificate Validation Vulnerabilitypaloaltonetworks · prisma sd-wan · CWE-295 Kimlik doğrulamasız Zayıf kripto	Orta5,2	—	%0,2	13 May 2026
24İzleyin	CVE-2026-0242İstismar yok	Trust Protection Foundation: SQL Injection Vulnerabilitypalo alto networks · trust protection foundation · CWE-89 RCE SQL enjeksiyonu	Orta6,1	—	%0,2	13 May 2026
20İzleyin	CVE-2026-0241İstismar yok	Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilitiespaloaltonetworks · trust protection foundation · CWE-754 Kimlik doğrulamasız	Orta5,1	—	%0,3	13 May 2026
18İzleyin	CVE-2026-0240İstismar yok	Trust Protection Foundation: Sensitive Information Disclosure Vulnerabilitypaloaltonetworks · trust protection foundation · CWE-497 Bilgi sızıntısı	Orta4,5	—	%0,2	13 May 2026
19İzleyin	CVE-2026-0239İstismar yok	Chronosphere Chronocollector Information Disclosure Vulnerabilitypaloaltonetworks · chronosphere collector · CWE-497 Kimlik doğrulamasız Bilgi sızıntısı	Orta4,9	—	%0,2	13 May 2026
28İzleyin	CVE-2026-0263İstismar yok	PAN-OS: Remote Code Execution (RCE) in IKEv2 Processingpaloaltonetworks · pan-os · CWE-787 pre-auth RCE Bellek hatası	Yüksek7,2	—	%0,4	13 May 2026

CVE-2026-0274
32İzleyin
Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
paloaltonetworks · cortex xsiam commvaultsecurityiq marketplace10 Haz 2026
CVE-2026-0271
23İzleyin
Prisma Access Agent: Local Privilege Escalation by Authorized Users
OrtaCVSS 5,9İstismar yokEPSS %0
- Yerel yetki yükseltme
linux · linux kernel10 Haz 2026
CVE-2026-0268
17İzleyin
Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux
OrtaCVSS 4,4İstismar yokEPSS %0
linux · linux kernel10 Haz 2026
CVE-2026-0243
19İzleyin
Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet
OrtaCVSS 4,9İstismar yokEPSS %0
- Kimlik doğrulamasız
paloaltonetworks · prisma sd-wan13 May 2026
CVE-2026-0262
26İzleyin
PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing
OrtaCVSS 6,6İstismar yokEPSS %0
- Kimlik doğrulamasız
paloaltonetworks · pan-os13 May 2026
CVE-2026-0261
24İzleyin
PAN-OS: Authenticated Admin Command Injection Vulnerability
OrtaCVSS 6,1İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
paloaltonetworks · pan-os13 May 2026
CVE-2026-0259
20İzleyin
WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)
OrtaCVSS 5,0İstismar yokEPSS %0
- Yol geçişi
paloaltonetworks · pan-os13 May 2026
CVE-2026-0258
19İzleyin
PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching
OrtaCVSS 4,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- SSRF
paloaltonetworks · pan-os13 May 2026
CVE-2026-0257
90Hemen
PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %96
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
paloaltonetworks · pan-os13 May 2026
CVE-2026-0256
17İzleyin
PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
OrtaCVSS 4,4İstismar yokEPSS %0
- XSS
paloaltonetworks · pan-os13 May 2026
CVE-2026-0251
23İzleyin
GlobalProtect App: Local Privilege Escalation Vulnerabilities
OrtaCVSS 5,9İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
paloaltonetworks · globalprotect13 May 2026
CVE-2026-0250
20İzleyin
GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway
OrtaCVSS 5,2İstismar yokEPSS %0
- pre-auth RCE
- Bellek hatası
paloaltonetworks · globalprotect13 May 2026
CVE-2026-0248
24İzleyin
Prisma Access Agent: Improper Certificate Validation Vulnerability
OrtaCVSS 6,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
paloaltonetworks · prisma access agent13 May 2026
CVE-2026-0247
23İzleyin
Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities
OrtaCVSS 5,9İstismar yokEPSS %0
- Kimlik doğrulama atlatma
- Yerel yetki yükseltme
paloaltonetworks · prisma access agent13 May 2026
CVE-2026-0246
23İzleyin
Prisma Access Agent: Local Privilege Escalation Vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
- Erişim denetimi (IDOR)
paloaltonetworks · prisma access agent13 May 2026
CVE-2026-0245
17İzleyin
Prisma Access Agent: Information Disclosure Vulnerabilities
OrtaCVSS 4,3İstismar yokEPSS %0
- Bilgi sızıntısı
paloaltonetworks · prisma access agent13 May 2026
CVE-2026-0244
20İzleyin
Prisma SD-WAN: Improper Certificate Validation Vulnerability
OrtaCVSS 5,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
paloaltonetworks · prisma sd-wan13 May 2026
CVE-2026-0242
24İzleyin
Trust Protection Foundation: SQL Injection Vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0
- RCE
- SQL enjeksiyonu
palo alto networks · trust protection foundation13 May 2026
CVE-2026-0241
20İzleyin
Trust Protection Foundation: Multiple Authorization Bypass Vulnerabilities
OrtaCVSS 5,1İstismar yokEPSS %0
- Kimlik doğrulamasız
paloaltonetworks · trust protection foundation13 May 2026
CVE-2026-0240
18İzleyin
Trust Protection Foundation: Sensitive Information Disclosure Vulnerability
OrtaCVSS 4,5İstismar yokEPSS %0
- Bilgi sızıntısı
paloaltonetworks · trust protection foundation13 May 2026
CVE-2026-0239
19İzleyin
Chronosphere Chronocollector Information Disclosure Vulnerability
OrtaCVSS 4,9İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bilgi sızıntısı
paloaltonetworks · chronosphere collector13 May 2026
CVE-2026-0263
28İzleyin
PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing
YüksekCVSS 7,2İstismar yokEPSS %0
- pre-auth RCE
- Bellek hatası
paloaltonetworks · pan-os13 May 2026