CVE-2026-0308

LOW 1.1 ALL-YEARS

Published 2026-09-10 · Last modified 2026-10-15 · palo_alto · NVD: Awaiting Analysis

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not affected by this vulnerability.

LIMITED SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.5%chance of exploitation in 30 days · 43rd percentile

○ In CISA KEV○ Catalogued PoC◆ SSVC: exploitation none, automatable no

Impact if exploited

1.1CVSS 4.0 · LOW · CNA

ConfidentialityLow
IntegrityLow
AvailabilityNone

What an attacker needs

✓Access: Reachable over the network — no local access needed
⚠Privileges: Requires an admin / high-privilege account
⚠User interaction: Succeeds with passive user activity
✓Complexity: No special conditions — reliably repeatable
✓Requirements: No special attack requirements

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Affected

Vendors Palo Alto Networks Siemens

Products Cloud Ngfw Pan Os Prisma Access Ruggedcom Ape1808

Weakness (CWE)

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

References and research data (JSON)

All CVSS metrics

LOW 1.1 v4.0 · CNA Primary
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
LOW 0.4 v4.0 · CNA Primary
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
LOW 1.1 v4.0 · NVD Secondary
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

References

Advisories

https://security.paloaltonetworks.com/CVE-2026-0308 vendor-advisoryCVE record · palo_alto · Updated 2026-09-10T05:48:46.726Z
NVD · CVE-2026-0308 · Updated 2026-10-15T02:18:35.790
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-75256 ADVISORYEUVD · EUVD-2026-75256

Technical & other

https://cert-portal.siemens.com/productcert/html/ssa-104023.htmlCVE record · siemens-SADP · Updated 2026-10-15T01:11:57.929Z
NVD · CVE-2026-0308 · Updated 2026-10-15T02:18:35.790

Sources: NVD · CVE.org · All sources and attribution · EPSS