Changeflow GovPing Data Privacy & Cybersecurity Palo Alto Networks Multiple Vulnerabilities Inc...
Priority review Guidance Added Final

Palo Alto Networks Multiple Vulnerabilities Including Remote Code Execution

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published
Detected
Email

Summary

CERT-FR published advisory CERTFR-2026-AVI-0412 disclosing multiple vulnerabilities in Palo Alto Networks products affecting Cortex XDR Agent, Cortex XSOAR/XSIAM, Prisma Browser, and Autonomous Digital Experience Manager. Several vulnerabilities allow remote code execution, data confidentiality breaches, and data integrity compromise. Organizations using affected Palo Alto products must apply vendor patches per referenced security bulletins.

Published by CERT-FR on cert.ssi.gouv.fr . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .
View original document View source feed page

What changed

CERT-FR disclosed multiple vulnerabilities in Palo Alto Networks products including CVE-2026-0232, CVE-2026-0233, and CVE-2026-0234 affecting seven product lines. Critical vulnerabilities enable remote code execution, data confidentiality breaches, data integrity compromise, and security policy bypass. Additional CVEs (CVE-2026-2648 through CVE-2026-3540) are referenced in vendor security bulletin PAN-SA-2026-0004.

Organizations running affected Palo Alto products face significant security risk and should immediately consult vendor security bulletins to obtain patches. Failure to patch could result in remote code execution attacks, data exfiltration, or complete system compromise. Security teams should prioritize patching Cortex XDR Agent versions 8.9.x and earlier, and Prisma Browser versions prior to 146.3.8.76.

What to do next

  1. Identify and audit all Palo Alto Networks products in use against the affected versions list
  2. Apply vendor-released security patches for CVE-2026-0232, CVE-2026-0233, CVE-2026-0234, and associated CVEs
  3. Monitor for additional CVE references (CVE-2026-2648 through CVE-2026-3540) and apply further patches as released

Archived snapshot

Apr 9, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 09 avril 2026 N° CERTFR-2026-AVI-0412 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans les produits Palo Alto Networks

Gestion du document

| Référence | CERTFR-2026-AVI-0412 |
| Titre | Multiples vulnérabilités dans les produits Palo Alto Networks |
| Date de la première version | 09 avril 2026 |
| Date de la dernière version | 09 avril 2026 |
| Source(s) | Bulletin de sécurité Palo Alto Networks CVE-2026-0232 du 08 avril 2026
Bulletin de sécurité Palo Alto Networks CVE-2026-0233 du 08 avril 2026
Bulletin de sécurité Palo Alto Networks CVE-2026-0234 du 08 avril 2026
Bulletin de sécurité Palo Alto Networks PAN-SA-2026-0004 du 08 avril 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risques

  • Atteinte à l'intégrité des données
  • Atteinte à la confidentialité des données
  • Contournement de la politique de sécurité
  • Exécution de code arbitraire à distance
  • Non spécifié par l'éditeur

Systèmes affectés

  • Autonomous Digital Experience Manager pour Windows versions 5.10.x antérieures à 5.10.4
  • Cortex XDR Agent versions 8.9.x antérieures à 8.9.1
  • Cortex XDR Agent sans CU-2120 sur Windows versions 7.9-CE sans les derniers correctifs de sécurité
  • Cortex XDR Agent sans CU-2120 sur Windows versions 8.3-CE sans les derniers correctifs de sécurité
  • Cortex XDR Agent sans CU-2120 sur Windows versions 8.7-CE antérieures à 8.7.101-CE
  • Cortex XDR Agent sans CU-2120 sur Windows versions 9.0.x antérieures à 9.0.1
  • Cortex XSIAM Microsoft Teams Marketplace versions 1.5.x antérieures à 1.5.52
  • Cortex XSOAR Microsoft Teams Marketplace versions 1.5.x antérieures à 1.5.52
  • Prisma Browser versions antérieures à 146.3.8.76

Résumé

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 09 avril 2026 Version initiale

Named provisions

Risques Systèmes affectés Résumé Solutions Documentation

Related changes

Favicon for www.cert.ssi.gouv.fr Multiple Microsoft Office Vulnerabilities Allow Remote Code Execution, Data Breach
Priority review Apr 15, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple Windows Vulnerabilities Enable Code Execution, Privilege Escalation
Urgent Apr 15, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple Microsoft CVEs Allow Code Execution, Elevation
Priority review Apr 15, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

Get daily alerts for CERT-FR Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Press inquiries →

Classification

Agency
CERT-FR
Published
April 9th, 2026
Instrument
Guidance
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
CERTFR-2026-AVI-0412

Who this affects

Applies to
Technology companies Manufacturers
Industry sector
5112 Software & Technology
Activity scope
Vulnerability patching Network security System patching
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Data Privacy Telecommunications

Browse Categories

Agriculture & Food Safety 69 AI Regulation 3 Banking & Finance 342 Consumer Protection 77 Courts & Legal 361 Data Privacy & Cybersecurity 78 Defense & National Security 51 Education 48 Energy 100 Environment 86 Environmental & Energy 38 Environmental Regulation 7 Financial Regulation 2 Financial Services 22 Government & Legislation 278 Government Operations 115 Healthcare 136 Healthcare Compliance 6 Healthcare & Life Sciences 101 Housing 16 Immigration 8 Immigration & Border Control 2 Insurance 68 Labor & Employment 126 Legal & Judicial 34 Occupational Safety 2 Pharma & Drug Safety 101 Pharma & Healthcare 1 Privacy 1 Professional Licensing 1 Public Health 2 Real Estate & Housing 61 Sanctions & Export Controls 2 Securities & Investments 29 Securities & Markets 103 Securities Regulation 6 Tax 64 Tax & Revenue 10 Telecom & Technology 47 Trade & Commerce 3 Trade & Sanctions 135 Transportation 89

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!