Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Palo Alto Networks" — 27 resultados ✕ Limpiar búsqueda
13,394
Total alertas
3047
Críticas
10075
Altas
8
Ransomware
1739
Esta semana
RSS
P Alto vulnerabilidad
12/08/2026
PAN-SA-2026-0011 Chromium: Monthly Vulnerability Update (August 2026)
Palo Alto Networks PSIRT publica advisory de seguridad: PAN-SA-2026-0011 Chromium: Monthly Vulnerability Update (August 2026) (Severity: HIGH). Tipo: Vulnerabilidad de seguridad. Producto afectado: Palo Alto Networks.
P Alto vulnerabilidad
12/08/2026
CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
Palo Alto Networks PSIRT publica advisory de seguridad: CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM). Tipo: Escalación de Privilegios. Producto afectado: GlobalProtect.
P Alto vulnerabilidad
12/08/2026
CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
Palo Alto Networks PSIRT publica advisory de seguridad: CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM). Tipo: Desbordamiento de Búfer. Producto afectado: GlobalProtect.
P Alto vulnerabilidad
12/08/2026
CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities
Palo Alto Networks PSIRT publica advisory de seguridad: CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM). Tipo: Escalación de Privilegios. Producto afectado: GlobalProtect.
P Alto vulnerabilidad
12/08/2026
CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation
Palo Alto Networks PSIRT publica advisory de seguridad: CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation (Severity: MEDIUM). Tipo: Escalación de Privilegios. Producto afectado: Prisma Access.
P Alto vulnerabilidad
12/08/2026
CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering
Palo Alto Networks PSIRT publica advisory de seguridad: CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering (Severity: LOW). Tipo: Divulgación de Información. Producto afectado: PAN-OS.
P Alto vulnerabilidad
09/07/2026
[CVE-2026-0276] A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a locally a…
A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a locally authenticated user to perform actions as the root user.

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
P Alto vulnerabilidad
09/07/2026
[CVE-2026-0286] A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software ena…
A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls an…
P Alto vulnerabilidad
09/07/2026
[CVE-2026-0287] Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthent…
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode. Panorama is not impacted by these vulnerab…
P Alto vulnerabilidad
09/07/2026
[CVE-2026-0283] An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networ…
An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security restrictions and establish an unauthorized site-to-site VPN connection. Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.
P Alto vulnerabilidad
09/07/2026
[CVE-2026-0280] An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enab…
An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network traffic that should be blocked to reach protected services. Cloud NGFW and Panorama are not impacted by this vulnerability.
P Alto vulnerabilidad
09/07/2026
[CVE-2026-0281] An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenti…
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to obtain web session tokens. This requires a legitimate user to first click on a malicious link provided by the attacker. The security risk posed by this issue is minimized by restricting access to the management web interface to o…
P Alto vulnerabilidad
08/07/2026
[CVE-2026-0288] Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component of Pal…
Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component of Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition or potentially execute arbitrary code by sending specially crafted network traffic. The security risk posed by this issue is minimized when the User-ID Terminal Server …
P Alto vulnerabilidad
08/07/2026
CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities
Palo Alto Networks PSIRT publica advisory de seguridad: CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities (Severity: LOW). Tipo: Cross-Site Scripting (XSS). Producto afectado: PAN-OS.
P Alto vulnerabilidad
08/07/2026
PAN-SA-2026-0010 Chromium and Prisma Browser: Monthly Vulnerability Update (July 2026)
Palo Alto Networks PSIRT publica advisory de seguridad: PAN-SA-2026-0010 Chromium and Prisma Browser: Monthly Vulnerability Update (July 2026) (Severity: HIGH). Tipo: Vulnerabilidad de seguridad. Producto afectado: Palo Alto Networks.

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
P Alto vulnerabilidad
10/06/2026
[CVE-2026-0271] A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux…
A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a local user to execute code with elevated privileges. This does not impact Prisma Access Agent on Windows, macOS, iOS, Android, or ChromeOS.
P Alto vulnerabilidad
10/06/2026
[CVE-2026-0272] A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated …
A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform actions on the device with root privileges. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators and by restricting access to the management inte…
P Alto vulnerabilidad
10/06/2026
[CVE-2026-0273] A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated ad…
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI or Web UI. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administ…
P Alto vulnerabilidad
10/06/2026
[CVE-2026-0270] A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux …
A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipulate network response traffic via a man-in-the-middle (MITM) attack, to write arbitrary files to the host.
P Alto vulnerabilidad
10/06/2026
PAN-SA-2026-0008 Chromium: Monthly Vulnerability Update (June 2026)
Palo Alto Networks PSIRT publica advisory de seguridad: PAN-SA-2026-0008 Chromium: Monthly Vulnerability Update (June 2026) (Severity: HIGH). Tipo: Vulnerabilidad de seguridad. Producto afectado: Palo Alto Networks.