Palo Alto Security Updates – 09 April 2026

The addressed vulnerabilities could allow the attacker to perform a denial of service attack, bypass security restrictions, obtain sensitive information, execute arbitrary commands, or bypass the authentication and gain access to the affected product.

Sample of the addressed vulnerabilities:

1. Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration Vulnerability (CVE-2026-0234):

• CVSS: 7.2
• Attack Vector: Network
• Attack Complexity: High
• Privileges Required: None
• User Interaction: None
• Consequences: Gain Access

2. PAN-OS: Denial of Service in Advanced DNS Security Feature Vulnerability (CVE-2026-0229):

• CVSS: 6.6
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Denial of Service

The affected products:

• PAN-OS.
• Cortex XSOAR.
• Cortex XDR Broker VM.
• Cortex XDR Agent.
• Autonomous Digital Experience Manager.