Dismissed

(not in Nixpkgs)

Permalink CVE-2026-54003

9.1 CRITICAL

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): Present (P)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): Present (P)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 4 days, 9 hours ago by @LeSuisse Activity log

• Created suggestion 4 days, 19 hours ago
• @LeSuisse dismissed (not in Nixpkgs) 4 days, 9 hours ago

Kirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` header

• https://github.com/getkirby/kirby/security/advisories/GHSA-whxw-24jc-cwmv x_refsource_CONFIRM
• https://github.com/getkirby/kirby/pull/8166 x_refsource_MISC
• https://github.com/getkirby/kirby/commit/1c7fee90e49153cf9ca4a6ec17481d25fbedc48d x_refsource_MISC
• https://github.com/getkirby/kirby/commit/3423f66c01dbc0455862e23ee699d2aa469f3234 x_refsource_MISC
• https://github.com/getkirby/kirby/commit/66a3a14bf0892d320723ba766cd5f1d33a51d15b x_refsource_MISC
• https://github.com/getkirby/kirby/commit/ab992dc149610b90e337c2955ab6ccb7f72ffb3a x_refsource_MISC
• https://github.com/getkirby/kirby/releases/tag/4.9.4 x_refsource_MISC
• https://github.com/getkirby/kirby/releases/tag/5.4.4 x_refsource_MISC

---

kirby

• ==>= 5.0.0, < 5.4.4
• ==< 4.9.4

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-58378

8.6 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): Active (A)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Active (A)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 4 days, 9 hours ago by @LeSuisse Activity log

• Created suggestion 4 days, 19 hours ago
• @LeSuisse dismissed (not in Nixpkgs) 4 days, 9 hours ago

Allwinner TV Box TV98 ADB exposed on network

• url vdb-entry
• url third-party-advisory

---

H616

• *

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-54004

6.3 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): Present (P)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): Present (P)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 4 days, 11 hours ago by @LeSuisse Activity log

• Created suggestion 4 days, 19 hours ago
• @LeSuisse dismissed (not in Nixpkgs) 4 days, 11 hours ago

Kirby: Access to files of top-level drafts is not protected by permissions

• https://github.com/getkirby/kirby/security/advisories/GHSA-89cp-7p28-jffg x_refsource_CONFIRM
• https://github.com/getkirby/kirby/commit/5b9a0ed587575e39156d37fa42ca7f6c73e121f7 x_refsource_MISC
• https://github.com/getkirby/kirby/commit/bc721080cd8dd4dcb7fc20b3fd0460ee8d0603b0 x_refsource_MISC
• https://github.com/getkirby/kirby/releases/tag/4.9.4 x_refsource_MISC
• https://github.com/getkirby/kirby/releases/tag/5.4.4 x_refsource_MISC

---

kirby

• ==>= 5.0.0, < 5.4.4
• ==< 4.9.4

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-0285

4.7 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): High (H)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): Unreported (U)
• Automatable (AU): No (N)
• Recovery (R): User (U)
• Value Density (V): Diffuse (D)
• Vulnerability Response Effort (RE): Moderate (M)
• Provider Urgency (U): Amber (Amber)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): High (H)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 4 days, 11 hours ago by @LeSuisse Activity log

• Created suggestion 4 days, 19 hours ago
• @LeSuisse dismissed (not in Nixpkgs) 4 days, 11 hours ago

PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface

• https://security.paloaltonetworks.com/CVE-2026-0285 vendor-advisory

---

PAN-OS

• <12.1.8
• <10.2.18-h8
• <11.1.16
• <11.2.13

Cloud NGFW

• ==All

Prisma Access

• ==All

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-0284

4.7 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): High (H)
• Subsequent System Impact Integrity (SI): Low (L)
• Subsequent System Impact Availability (SA): Low (L)
• Exploit Maturity (E): Unreported (U)
• Automatable (AU): No (N)
• Recovery (R): Automatic (A)
• Value Density (V): Diffuse (D)
• Vulnerability Response Effort (RE): Moderate (M)
• Provider Urgency (U): Amber (Amber)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): High (H)
• Modified Subsequent System Impact Integrity (MSI): Low (L)
• Modified Subsequent System Impact Availability (MSA): Low (L)
• Safety (S): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 4 days, 11 hours ago by @LeSuisse Activity log

• Created suggestion 4 days, 19 hours ago
• @LeSuisse dismissed (not in Nixpkgs) 4 days, 11 hours ago

PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)

• https://security.paloaltonetworks.com/CVE-2026-0284 vendor-advisory

---

PAN-OS

• <11.2.4-h20
• <10.2.7-h36
• <11.1.4-h35
• <12.1.4-h8

Cloud NGFW

• ==All

Prisma Access

• ==All

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-49274

5.3 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): Low (L)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 4 days, 11 hours ago by @LeSuisse Activity log

• Created suggestion 4 days, 19 hours ago
• @LeSuisse dismissed (not in Nixpkgs) 4 days, 11 hours ago

Kirby: `pages.access` permission is not checked in the pages picker for parent pages

• https://github.com/getkirby/kirby/security/advisories/GHSA-23q2-54qv-rq5x x_refsource_CONFIRM
• https://github.com/getkirby/kirby/commit/1ae575da24e1b1cb8803a031d37eff14606d7c55 x_refsource_MISC
• https://github.com/getkirby/kirby/commit/3bad37117adf2013548a784f820ddb2d8317333c x_refsource_MISC
• https://github.com/getkirby/kirby/commit/3f4398cdcf9f50f84fdac52ad78a7a85fb31589f x_refsource_MISC
• https://github.com/getkirby/kirby/commit/bffffce6c081f69c46163cc89b1fd18ccf2a18d1 x_refsource_MISC
• https://github.com/getkirby/kirby/releases/tag/4.9.4 x_refsource_MISC
• https://github.com/getkirby/kirby/releases/tag/5.4.4 x_refsource_MISC

---

kirby

• ==>= 5.0.0, < 5.4.4
• ==< 4.9.4

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-50188

6.9 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): High (H)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): High (H)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 4 days, 11 hours ago by @LeSuisse Activity log

• Created suggestion 4 days, 19 hours ago
• @LeSuisse dismissed (not in Nixpkgs) 4 days, 11 hours ago

Kirby: Request header injection in `Http\Remote`

• https://github.com/getkirby/kirby/security/advisories/GHSA-4v4h-m2qq-ppgw x_refsource_CONFIRM
• https://github.com/getkirby/kirby/commit/aa33414e1669e866cdd6f4decfae2a669e8bb828 x_refsource_MISC
• https://github.com/getkirby/kirby/commit/fad9cbd22c73ed0fbd3aaf62310a8dcacfc007cd x_refsource_MISC
• https://github.com/getkirby/kirby/releases/tag/4.9.4 x_refsource_MISC
• https://github.com/getkirby/kirby/releases/tag/5.4.4 x_refsource_MISC

---

kirby

• ==>= 5.0.0, < 5.4.4
• ==< 4.9.4

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-0281

2.1 LOW

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): Present (P)
• Privileges Required (PR): None (N)
• User Interaction (UI): Active (A)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): Low (L)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): Unreported (U)
• Automatable (AU): No (N)
• Recovery (R): Automatic (A)
• Value Density (V): Diffuse (D)
• Vulnerability Response Effort (RE): Moderate (M)
• Provider Urgency (U): Amber (Amber)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): Present (P)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Active (A)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): Low (L)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 4 days, 11 hours ago by @LeSuisse Activity log

• Created suggestion 4 days, 19 hours ago
• @LeSuisse dismissed (not in Nixpkgs) 4 days, 11 hours ago

PAN-OS: Information Disclosure Vulnerability in Management Web Interface

• https://security.paloaltonetworks.com/CVE-2026-0281 vendor-advisory

---

PAN-OS

• <12.1.8
• <10.2.18-h8
• <11.1.16
• <11.2.13

Cloud NGFW

• ==All

Prisma Access

• ==All

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-11404

8.7 HIGH

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): None (N)
• Vulnerable System Impact Integrity (VI): None (N)
• Vulnerable System Impact Availability (VA): High (H)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): None (N)
• Modified Vulnerable System Impact Integrity (MVI): None (N)
• Modified Vulnerable System Impact Availability (MVA): High (H)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Automatable (AU): Not Defined (X)
• Recovery (R): Not Defined (X)
• Value Density (V): Not Defined (X)
• Vulnerability Response Effort (RE): Not Defined (X)
• Provider Urgency (U): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)
• Exploit Maturity (E): Not Defined (X)

updated 4 days, 11 hours ago by @LeSuisse Activity log

• Created suggestion 4 days, 19 hours ago
• @LeSuisse dismissed (not in Nixpkgs) 4 days, 11 hours ago

Cesanta Mongoose < 7.22 Out-of-Bounds Read in MG_TLS_BUILTIN ClientHello Session ID Parsing

• Mongoose 7.22 Release Notes patchrelease-notes
• Product product
• Patch Commit patch
• https://www.vulncheck.com/advisories/cesanta-mongoose-out-of-bounds-read-in-mg-… third-party-advisory

---

Mongoose

• <7.22

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-0286

6.0 MEDIUM

• CVSS version (CVSS): 4.0
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Attack Requirement (AT): None (N)
• Privileges Required (PR): High (H)
• User Interaction (UI): None (N)
• Vulnerable System Impact Confidentiality (VC): High (H)
• Vulnerable System Impact Integrity (VI): High (H)
• Vulnerable System Impact Availability (VA): None (N)
• Subsequent System Impact Confidentiality (SC): None (N)
• Subsequent System Impact Integrity (SI): None (N)
• Subsequent System Impact Availability (SA): None (N)
• Exploit Maturity (E): Unreported (U)
• Automatable (AU): No (N)
• Recovery (R): User (U)
• Value Density (V): Diffuse (D)
• Vulnerability Response Effort (RE): Moderate (M)
• Provider Urgency (U): Amber (Amber)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Attack Requirement (MAT): None (N)
• Modified Privileges Required (MPR): High (H)
• Modified User Interaction (MUI): None (N)
• Modified Vulnerable System Impact Confidentiality (MVC): High (H)
• Modified Vulnerable System Impact Integrity (MVI): High (H)
• Modified Vulnerable System Impact Availability (MVA): None (N)
• Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
• Modified Subsequent System Impact Integrity (MSI): Negligible (N)
• Modified Subsequent System Impact Availability (MSA): Negligible (N)
• Safety (S): Not Defined (X)
• Confidentiality Req. (CR): Not Defined (X)
• Integrity Req. (IR): Not Defined (X)
• Availability Req. (AR): Not Defined (X)

updated 4 days, 11 hours ago by @LeSuisse Activity log

• Created suggestion 4 days, 19 hours ago
• @LeSuisse dismissed (not in Nixpkgs) 4 days, 11 hours ago

PAN-OS: Authenticated Command Injection in CLI

• https://security.paloaltonetworks.com/CVE-2026-0286 vendor-advisory

---

PAN-OS

• <12.1.8
• <10.2.18-h8
• <11.1.16
• <11.2.13

Cloud NGFW

• ==All

Prisma Access

• ==All