Known vulnerabilities in Palo Alto PAN-OS 10.2.10-h37

Version: 10.2.10-h37
Software CPE: cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Palo Alto PAN-OS version 10.2.10-h37 Palo Alto PAN-OS 10.2.10-h37 is affected by 7 vulnerabilities: 3 high, 2 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137318 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-0287
CWE-754 Medium
No
No
10.2.7-h36, 10.2.10-h39, 10.2.13-h23, 10.2.16-h9, 10.2.18-h8, 11.1.4-h35, 11.1.6-h35, 11.1.7-h8, 11.1.10-h30, 11.1.13-h9, 11.1.16, 11.2.4-h20, 11.2.7-h18, 11.2.10-h12, 11.2.13, 12.1.4-h8, 12.1.7-h2, 12.1.8 10.07.2026 SB2026071034
#VU137309 - Incorrect Calculation of Buffer Size
CVE-2026-0280
CWE-131 Medium
No
No
10.2.7-h36, 10.2.10-h39, 10.2.13-h23, 10.2.16-h9, 10.2.18-h8, 11.1.4-h35, 11.1.6-h35, 11.1.7-h8, 11.1.10-h30, 11.1.13-h9, 11.1.16, 11.2.4-h20, 11.2.7-h18, 11.2.10-h11, 11.2.13, 12.1.4-h8, 12.1.7-h2, 12.1.8 10.07.2026 SB2026071034
#VU137306 - Missing Authentication for Critical Function
CVE-2026-0283
CWE-306 High
No
No
10.2.7-h36, 10.2.10-h39, 10.2.13-h23, 10.2.16-h9, 10.2.18-h8, 11.1.4-h35, 11.1.6-h35, 11.1.7-h8, 11.1.10-h30, 11.1.13-h9, 11.1.16, 11.2.4-h20, 11.2.7-h18, 11.2.10-h12, 11.2.13, 12.1.4-h8, 12.1.7-h2, 12.1.8 10.07.2026 SB2026071034
#VU137305 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-0284
CWE-74 High
No
No
10.2.7-h36, 10.2.10-h39, 10.2.13-h23, 10.2.16-h9, 10.2.18-h8, 11.1.4-h35, 11.1.6-h35, 11.1.7-h8, 11.1.10-h30, 11.1.13-h9, 11.1.16, 11.2.4-h20, 11.2.7-h18, 11.2.10-h12, 11.2.13, 12.1.4-h8, 12.1.7-h2, 12.1.8 10.07.2026 SB2026071034
#VU137304 - Server-Side Request Forgery (SSRF)
CVE-2026-0285
CWE-918 Low
No
No
10.2.7-h36, 10.2.10-h39, 10.2.13-h23, 10.2.16-h9, 10.2.18-h8, 11.1.4-h35, 11.1.6-h35, 11.1.7-h8, 11.1.10-h30, 11.1.13-h9, 11.1.16, 11.2.4-h20, 11.2.7-h18, 11.2.10-h11, 11.2.13, 12.1.4-h8, 12.1.7-h2, 12.1.8 10.07.2026 SB2026071034
#VU137303 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-0286
CWE-78 Low
No
No
10.2.7-h36, 10.2.10-h39, 10.2.13-h23, 10.2.16-h9, 10.2.18-h8, 11.1.4-h35, 11.1.6-h35, 11.1.7-h8, 11.1.10-h30, 11.1.13-h9, 11.1.16, 11.2.4-h20, 11.2.7-h18, 11.2.10-h11, 11.2.13, 12.1.4-h8, 12.1.7-h2, 12.1.8 10.07.2026 SB2026071034
#VU137301 - Out-of-bounds write
CVE-2026-0288
CWE-787 High
No
No
10.2.7-h36, 10.2.10-h39, 10.2.13-h23, 10.2.16-h9, 10.2.18-h8, 11.1.4-h35, 11.1.6-h35, 11.1.7-h8, 11.1.10-h30, 11.1.13-h9, 11.1.16, 11.2.4-h20, 11.2.7-h18, 11.2.10-h12, 11.2.13, 12.1.4-h8, 12.1.7-h2, 12.1.8 10.07.2026 SB2026071034