Known vulnerabilities in Palo Alto PAN-OS 11.2.14

Version: 11.2.14
Software CPE: cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 1

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Palo Alto PAN-OS version 11.2.14 Palo Alto PAN-OS 11.2.14 is affected by 7 vulnerabilities: 1 high, 2 medium, 4 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155832 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-0316
CWE-79 Low
No
No
11.1.16-h3, 11.2.16, 12.1.10-h2, 12.2.4 15.10.2026 SB2026101523
#VU155831 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-0317
CWE-754 Low
No
No
11.1.16-h3, 11.2.16, 12.1.10-h2, 12.2.4 15.10.2026 SB2026101523
#VU155830 - Stack-based buffer overflow
CVE-2026-0318
CWE-121 Medium
No
No
11.1.4-h37, 11.1.6-h39, 11.1.7-h11, 11.1.10-h35, 11.1.13-h15, 11.1.16-h3, 11.2.4-h22, 11.2.7-h21, 11.2.10-h15, 11.2.13-h3, 11.2.15, 12.1.4-h12, 12.1.7-h8, 12.1.10-h2, 12.2.4 15.10.2026 SB2026101523
#VU155829 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-0319
CWE-754 Low
No
No
10.2.7-h38, 10.2.10-h41, 10.2.13-h26, 10.2.16-h11, 10.2.18-h12, 11.1.4-h37, 11.1.6-h39, 11.1.7-h11, 11.1.10-h35, 11.1.13-h15, 11.1.16-h3, 11.2.4-h22, 11.2.7-h21, 11.2.10-h15, 11.2.13-h3, 11.2.16, 12.1.4-h12, 12.1.7-h8, 12.1.10-h2, 12.2.4 15.10.2026 SB2026101523
#VU155828 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-0320
CWE-78 Low
No
No
10.2.7-h38, 10.2.10-h41, 10.2.13-h26, 10.2.16-h11, 10.2.18-h12, 11.1.4-h37, 11.1.6-h39, 11.1.7-h11, 11.1.10-h35, 11.1.13-h15, 11.1.16-h3, 11.2.4-h22, 11.2.7-h21, 11.2.10-h15, 11.2.13-h3, 11.2.16, 12.1.4-h12, 12.1.7-h8, 12.1.10-h2, 12.2.4 15.10.2026 SB2026101523
#VU155827 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-0321
CWE-754 Medium
No
No
10.2.7-h38, 10.2.10-h41, 10.2.13-h26, 10.2.16-h11, 10.2.18-h12, 11.1.4-h37, 11.1.6-h39, 11.1.7-h11, 11.1.10-h35, 11.1.13-h15, 11.1.16-h3, 11.2.4-h22, 11.2.7-h21, 11.2.10-h15, 11.2.13-h3, 11.2.16, 12.1.4-h12, 12.1.7-h8, 12.1.10-h2, 12.2.4 15.10.2026 SB2026101523
#VU155826 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-0322
CWE-94 High
No
Exploited
10.2.7-h38, 10.2.10-h41, 10.2.13-h26, 10.2.16-h11, 10.2.18-h12, 11.1.4-h37, 11.1.6-h39, 11.1.7-h11, 11.1.10-h35, 11.1.13-h15, 11.1.16-h3, 11.2.4-h22, 11.2.7-h21, 11.2.10-h15, 11.2.13-h3, 11.2.16, 12.1.4-h12, 12.1.7-h8, 12.1.10-h2, 12.2.4 15.10.2026 SB2026101522