CVE-2026-0279

Name of the Vulnerable Software and Affected Versions PAN-OS (affected versions not specified)

Description Multiple cross-site scripting issues exist in the User-ID Authentication Portal, GlobalProtect gateway/portal features, and Clientless VPN. These flaws allow an unauthenticated remote attacker to store or execute malicious JavaScript payloads by exploiting a lack of proper web page structure protection. This affects PA-Series and VM-Series firewalls, as well as Panorama virtual and M-Series, and Prisma Access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict management interface and User-ID Authentication Portal access to trusted internal IP addresses.