InfoSecBulletin Cybersecurity for mankind
Palo Alto Networks shared its security bulletin revealing 11 new issues that impact PAN-OS, the GlobalProtect App, Prisma Access Agent, and Prisma Browser. There is also a monthly update for Chromium.
The patch batch covers flaws with information leaks, getting extra system rights, buffer overflow, skipping certificate checks, and bypassing security measures.
Daily Cyber security update for 06.11. 2026
Cyber attack causes French bank Credit Mutuel Arkea €100 million missing
OpenAI AI Pipeline Discovers 948 Linux Kernel Privilege Escalation Flaws in 30 Hours
Bangladeshi Researcher Rasel Earns First Apple CVE Recognition for Model I/O Flaw
WinRAR, WordPress RCE flaw & Zyxel GS1900 Zero-Day exploited in the wild
Daily Cyber security update for 04.11. 2026
Daily Cyber security update for 03.11. 2026
Using ARTEX AI, Hacker to attack 200 Organizations Across 14 Countries
Amadeus cyber incident impacted “Cathay Pacific, Qantas, Japan, Malaysia, Korean & Asiana” Airlines
Multiple European supermarket fridges got hacked: Temperatures reached high as 55°C
Severity scores go from a low 1.1 to a moderate 7.2 on the CVSS scale. This means that none of the new issues are very serious in this release. Security teams watching PAN-OS weaknesses should check endpoint risks in all company areas.
Palo Alto Networks Patches 11 New Flaws
The main infrastructure issue, CVE-2026-0301, is a low-risk (CVSS 1.7) flaw that lets information leak in PAN-OS URL Filtering. It affects Cloud NGFW and several PAN-OS versions like 12.1, 11.2, 11.1, and 10.2, as well as Prisma Access set up on AWS and Azure.
Fixes are ready for the affected PAN-OS 11.1 and 10.2 versions, and Palo Alto Networks has already fixed the Cloud NGFW and public-cloud Prisma Access systems. Organizations should check the release tables in the Palo Alto Networks Security Advisories. This will help them make sure all firewall management interfaces are updated.
The GlobalProtect App had the most fixes this month, with six different CVEs reported:
CVE-2026-0299 (CVSS 5.9): Addresses multiple local privilege escalation flaws across GlobalProtect 6.3, 6.2, and 6.0 on Linux, macOS, and Windows; mobile builds (iOS, Android, Chrome OS) remain unaffected.
CVE-2026-0298 (CVSS 5.2): Resolves a code execution vulnerability specific to the Windows Pre-Logon Access Provider (PLAP) component.
CVE-2026-0297 (CVSS 5.2): Fixes a buffer overflow triggered during the UDP tunnel handshake process, impacting iOS, Android, and Chrome OS versions prior to 6.3.5.
CVE-2026-0296 (CVSS 4.5): Mitigates an improper certificate validation bypass affecting desktop clients.
CVE-2026-0295 (CVSS 4.1): Fixes a race condition leading to local privilege escalation on macOS endpoints.
Patches for some GlobalProtect app flaws on version 6.0 are expected to be ready by August 31, 2026, showing that work is still being done for older clients.
| CVE Identifier | Component / Product | CVSS Score | Vulnerability Type & Scope | Patch Status / ETA |
| CVE-2026-0301 | PAN-OS URL Filtering / Prisma Access | 1.7 | Information Disclosure | Patched / Cloud Remediated |
| CVE-2026-0299 | GlobalProtect App (Desktop) | 5.9 | Local Privilege Escalation | Patched (Branch 6.0 ETA Aug 31) |
| CVE-2026-0298 | GlobalProtect Windows PLAP | 5.2 | Local Code Execution | Patched |
| CVE-2026-0297 | GlobalProtect App (Mobile/Desktop) | 5.2 | UDP Handshake Buffer Overflow | Fixed in 6.3.5+ |
| CVE-2026-0294 | Prisma Access Agent (Win/macOS) | 6.0 | Local Privilege Escalation | Pending (ETA Aug 20, 2026) |
| CVE-2026-0293 | Prisma Access Agent (Windows) | 5.6 | Anti-Tamper Protection Bypass | Pending (ETA Aug 20, 2026) |
| PAN-SA-2026-0011 | Prisma Browser (< 148.18.4.217) | 7.2 | Chromium Rollup Vulnerabilities | Fixed in 150.49.8.187+ |
Prisma Access Agent was subject to four separate security disclosures:
CVE-2026-0294 (CVSS 6.0): A local privilege escalation vulnerability affecting Windows and macOS with a fix ETA of August 20.
CVE-2026-0293 (CVSS 5.6): An anti-tamper protection bypass on Windows with an August 20 fix ETA.
CVE-2026-0292 (CVSS 2.1): A local security inspection bypass on Windows sharing the August 20 timeline.
CVE-2026-0291 (CVSS 1.1): An authenticated file deletion flaw on Linux, already patched in version 26.2.2.
Palo Alto Networks released alert PAN-SA-2026-0011 about issues in Chromium for Prisma Browser versions before 148.18.4.217. It has a CVSS score of 7.2, which is the highest risk in the August update.
Organizations using Prisma Browser should prioritize updating to version 150.49.8.187 or later.
Administrators should focus on updating the PAN-OS management interfaces and URL filtering rules that are exposed to the internet. Next, they should update desktop VPN clients on Windows and macOS, where there are issues with privilege escalation.
