CVE-2026-0284

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS (affected versions not specified)

Description An XML injection issue exists in the Large Scale VPN (LSVPN) functionality. This occurs due to improper neutralization of special elements in output data, allowing an unauthenticated attacker with network access to inject malicious XML content. This could lead to the bypass of security mechanisms, information disclosure, or the corruption of internal LSVPN satellite data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.