VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

Výsledky hledání

výrobce: Palo Alto Networks× typ: zranitelnost× v celém archivu zrušit filtry

9 karet z 18 položek CZ · EN/orig

· zachyceno

SPOJENO PŘES CVE Oracle Security Alert Advisory CVE-2026-109618 and CVE-2026-109619

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-109618, CVE-2026-109619, Summary: This Security Alert addresses CVE-2026-109618 and CVE-2026-109619. These vulnerabilities, known as PHP2Shell, allow for unauthenticated remote code execution in PHP. Oracle strongly recommends that customers apply the available security patches without delay. The Security Alert advisory will continue to be updated as additional product patches become…

KEV ✓ EPSS 1.00 CVSS 9.8 CVE-2026-109618 CVE-2026-109619 Oracle Festo Apache PHP WAGO Belden QNAP Synology ESET Welotec Juniper Networks HPE METTLER TOLEDO Citrix Cloud Software Group Palo Alto Networks Tenable Splunk Cisco WordPress Drupal Joomla výroba a průmysl školství FI DE FR IT BE US SK CZ CA RU NL AT SE HR GB

tg: zneužíváno tg: zranitelnost tg: rozbor tg: novinka v produktu tg: návod tg: propagace tp: malware tp: phishing tp: dodavatelský řetězec tp: AI tp: průmyslové systémy

· zachyceno · NCSC-FI · Oracle Security Alert Advisory CVE-2026-109618 and CVE-2026-109619 · CERT@VDE · Two critical PHP vulnerabilities in several Festo Didactic products · zachyceno · CERT-FR – avis · Multiples vulnérabilités dans macmon et NRSW (02 novembre 2026) · CSIRT Itálie (ACN) · ESET: aggiornamenti e mitigazioni per le vulnerabilità "PHP2Shell" · Aikido Security · How to patch PHP2Shell with free Aikido Images · Tenable Research · Discover and remediate PHP2Shell exposure with Tenable · ESET WeLiveSecurity · PHP2Shell: What to know about two critical PHP flaws · BleepingComputer · PHP2Shell security flaws now sucessfully exploited in the wild · Qualys · Can’t Patch PHP2Shell Yet? Build a Stopgap with the Controls You Own · CSIRT.CZ – novinky · Kritické zranitelnosti PHP umožňují vzdálené spuštění kódu · zachyceno · Splunk Advisories · SVD-2026-1013: Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Splunk Products - October 2026 · Cisco PSIRT · Vulnerabilities in PHP Affecting Cisco Products: October 2026 · Cyber Centre Kanada · AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619 · Malwarebytes Labs · PHP2Shell: Why websites are going offline for emergency security updates · Palo Alto PSIRT · CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: HIGH) · Securelist (Kaspersky) · Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) · Cisco Talos · Two critical RCEs in PHP core · NÚKIB · Upozornění na "php2shell", dvě kritické zranitelnosti v PHP · NCSC-NL · NCSC-2026-0443 [1.00] [H/H] Kwetsbaarheden verholpen in PHP · CERT.at · Kritische Sicherheitslücken in PHP - Updates verfügbar · Palo Alto Unit 42 · Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 · SANS Internet Storm Ctr. · Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st) · zachyceno · CISA Advisories · Critical Vulnerabilities in PHP Require Immediate Patching · CERT-SE · Kritiska sårbarheter i PHP · CERT.hr · UPOZORENJE: Kritične ranjivosti u PHP-u – čeka se nadogradnja · SK-CERT (NBÚ SR) · Národné centrum kybernetickej bezpečnosti SK-CERT varuje pred dvoma kritickými zraniteľnosťami v PHP, identifikovanými a · zachyceno · Fortinet PSIRT · PHP core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619) · Huntress · Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619) · zachyceno · Elastic Security · php2shell: Assessing Elastic detection coverage relevant to CVE-2026-109618 and CVE-2026-109619 · zachyceno · Sophos Threat Research · Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

· zachyceno

SPOJENO PŘES CVE Vulnérabilité dans Stormshield Management Center (30 octobre 2026)

Une vulnérabilité a été découverte dans Stormshield Management Center. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.

KEV ✓ EPSS 0.83 CVSS 9.8 CVE-2026-111497 Stormshield Broadcom VMware Google Node.js Microsoft Brotli PHP Palo Alto Networks Bun brotlicffi FR FI CA SE US GB IT CZ BE

tg: zneužíváno tg: zranitelnost tg: rozbor tg: novinka v produktu tp: dodavatelský řetězec

· zachyceno · CERT-FR – avis · Vulnérabilité dans Stormshield Management Center (30 octobre 2026) · zachyceno · NCSC-FI · VMSA-2026-0008: Node.js Brotli decoder out-of-bounds write remote code execution vulnerability (CVE-2026-111497) · Cyber Centre Kanada · AL26-027 - Critical vulnerability impacting Google Brotli – CVE-2026-111497 · CERT-SE · Kritisk sårbarhet i Google Brotli · BleepingComputer · CISA warns of hackers now exploiting critical Node2Shell flaw · zachyceno · Sophos Threat Research · Node2Shell (CVE-2026-111497) in active exploitation · Tenable Research · Brotli2Shell: Frequently asked questions for Google Brotli decoder vulnerability (CVE-2026-111497) · zachyceno · CISA KEV · Google Brotli Unchecked Return Value Vulnerability (CVE-2026-111497) · Palo Alto PSIRT · CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL) · CSIRT Itálie (ACN) · Google: disponibile PoC per lo sfruttamento della CVE-2026-111497 · CSIRT.CZ (CZ.NIC) · Kritická zranitelnost Broccoli2Shell ohrožuje aplikace využívající HTTP · Aikido Security · Python packages are also vulnerable to the Node2Shell Brotli flaw (CVE-2026-111497)

Palo Alto Networks security advisory (AV26-1056)

Serial number: AV26-1056 Date: October 16, 2026 As of October 15, 2026, Palo Alto Networks is affected by a vulnerability in the following product: Idira Secrets Manager (Self-Hosted) Prior to v13.9.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Idira Secrets Manager - Version 13.9.1 Palo Alto Networks Security Advisories

Palo Alto Networks CA

tg: zranitelnost

· Cyber Centre Kanada · Palo Alto Networks security advisory (AV26-1056)

SPOJENO PŘES CVE Palo Alto Networks: rilevato sfruttamento in rete della CVE-2026-0322 relativa a PAN-OS

Palo Alto Networks ha rilasciato aggiornamenti di sicurezza per sanare molteplici vulnerabilità, di cui una con gravità “alta” relativa a PAN-OS per la quale è stato rilevato lo sfruttamento attivo in rete.

KEV ✓ EPSS 0.02 CVSS 8.6 CVE-2026-0322 Palo Alto Networks IT FI US CA

tg: zneužíváno tg: zranitelnost

· CSIRT Itálie (ACN) · Palo Alto Networks: rilevato sfruttamento in rete della CVE-2026-0322 relativa a PAN-OS · zachyceno · NCSC-FI · PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface · BleepingComputer · Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks · Cyber Centre Kanada · Palo Alto Networks security advisory (AV26-1041) · Palo Alto PSIRT · CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH) · zachyceno · CISA KEV · Palo Alto Networks PAN-OS Code Injection Vulnerability (CVE-2026-0322)

· zachyceno

Multiples vulnérabilités dans les produits Palo Alto Networks (15 octobre 2026)

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance. Palo Alto Networks indique que la...

Palo Alto Networks FR

tg: zranitelnost

· zachyceno · CERT-FR – avis · Multiples vulnérabilités dans les produits Palo Alto Networks (15 octobre 2026)

NCSC-2026-0369 [1.00] [M/H] Kwetsbaarheid verholpen in Palo Alto Networks PAN-OS

Palo Alto Networks heeft een kwetsbaarheid verholpen in PAN-OS software, specifiek voor VM-Series en PA-Series firewalls, evenals Panorama management software. De kwetsbaarheid betreft een buffer overflow in de XML-verwerkingsfunctionaliteit van PAN-OS. Ongeauthenticeerde aanvallers met netwerktoegang kunnen hierdoor een denial-of-service veroorzaken op VM-Series firewalls of willekeurige code uitvoeren met rootrechten op PA-Series firewalls. Ook Panorama management software is getroffen. De…

Palo Alto Networks NL

tg: zranitelnost tp: DDoS

· NCSC-NL · NCSC-2026-0369 [1.00] [M/H] Kwetsbaarheid verholpen in Palo Alto Networks PAN-OS

SPOJENO PŘES CVE Risolte vulnerabilità in Palo Alto Networks PAN-OS

Palo Alto Networks ha rilasciato aggiornamenti di sicurezza per PAN-OS, sistema operativo impiegato nei firewall di nuova generazione e nelle soluzioni di gestione centralizzata della sicurezza del produttore, che sanano alcune vulnerabilità, di cui una con gravità "alta".

EPSS 0.01 CVE-2026-0310 Palo Alto Networks IT CA US

tg: zranitelnost

· CSIRT Itálie (ACN) · Risolte vulnerabilità in Palo Alto Networks PAN-OS · Cyber Centre Kanada · Palo Alto Networks security advisory (AV26-905) · Palo Alto PSIRT · CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing (Severity: HIGH)

· zachyceno

Palo Alto Networks Security Advisories 2026-09-09

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.7, CVEs: CVE-2026-0310, CVE-2026-0309, CVE-2026-0308, CVE-2026-0307, CVE-2026-0306, CVE-2026-0305, CVE-2026-0304, CVE-2026-0303, CVE-2026-0302, Summary: Multiple security advisories for multiple Paloalto products.

EPSS 0.01 CVSS 7.7 CVE-2026-0302 CVE-2026-0303 CVE-2026-0304 CVE-2026-0305 CVE-2026-0306 CVE-2026-0307 CVE-2026-0308 CVE-2026-0309 CVE-2026-0310 Palo Alto Networks FI

tg: zranitelnost

· zachyceno · NCSC-FI · Palo Alto Networks Security Advisories 2026-09-09

· zachyceno

Multiples vulnérabilités dans les produits Palo Alto Networks (10 septembre 2026)

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une injection de code indirecte à distance (XSS).

EPSS 0.01 a dalších 11 CVE-2026-76038 CVE-2026-76046 CVE-2026-76047 CVE-2026-79016 CVE-2026-79032 CVE-2026-79118 CVE-2026-79195 CVE-2026-79282 CVE-2026-79286 CVE-2026-79290 CVE-2026-79293 CVE-2026-84348 CVE-2026-84350 CVE-2026-84351 CVE-2026-84357 CVE-2026-84358 CVE-2026-84359 Palo Alto Networks FR

tg: zranitelnost

· zachyceno · CERT-FR – avis · Multiples vulnérabilités dans les produits Palo Alto Networks (10 septembre 2026)