Palo Alto Networks security advisory (AV26-905)
Canada's Cyber Centre relayed Palo Alto Networks advisories covering PAN-OS, Cloud NGFW, Prisma Access, and Prisma Browser vulnerabilities, including PAN-OS CVE-2026-0310 buffer overflow.
The Canadian Centre for Cyber Security issued advisory AV26-905, noting that as of September 10, 2026, multiple Palo Alto Networks products are affected by vulnerabilities. Affected products include Cloud NGFW on AWS and Azure, multiple PAN-OS versions, Prisma Access, and Prisma Browser prior to 151.26.5.170. The advisory references CVE-2026-0310, a PAN-OS buffer overflow via XML processing (PAN-SA-2026-0012), and the September 2026 Chromium monthly vulnerability update. Administrators are encouraged to review the vendor links and apply available updates.
- Advisory AV26-905 covers Cloud NGFW (AWS/Azure), PAN-OS, Prisma Access, and Prisma Browser before 151.26.5.170.
- CVE-2026-0310 is a PAN-OS buffer overflow via XML processing, tracked in PAN-SA-2026-0012.
- Prisma Browser is also affected by the September 2026 Chromium monthly vulnerability update.
- Users and administrators are advised to review vendor advisories and apply necessary updates.
- CVEs
- CVE-2026-0310
- Vendors
- Palo Alto Networks
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-0310 | Buffer Overflow in PAN-OS XML Processing Enables Root RCE on PA-Series Firewalls | 7.2 | — |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-905 Date: September 10, 2026 As of September 10, 2026, Palo Alto Networks is affected by vulnerabilities in the following products: Cloud NGFW All on AWS*, All on Azure* PAN-OS Multiple versions Prisma Access Multiple versions Prisma Browser Prior to 151. 26. 5.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.