{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"PAN-OS versions 11.2.7-x ant\u00e9rieures \u00e0 11.2.7-h8","product":{"name":"PAN-OS","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"PAN-OS versions 10.2.10-x ant\u00e9rieures \u00e0 10.2.10-h30","product":{"name":"PAN-OS","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"PAN-OS versions 11.1.4-x ant\u00e9rieures \u00e0 11.1.4-h27","product":{"name":"PAN-OS","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"PAN-OS versions 10.2.13-x ant\u00e9rieures \u00e0 10.2.13-h18","product":{"name":"PAN-OS","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"PAN-OS versions 10.2.16-x ant\u00e9rieures \u00e0  10.2.16-h6","product":{"name":"PAN-OS","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"PAN-OS versions 10.2.18-x ant\u00e9rieures \u00e0 10.2.18-h1","product":{"name":"PAN-OS","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"PAN-OS versions 10.1.x ant\u00e9rieures \u00e0 10.1.14-h20","product":{"name":"PAN-OS","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"PAN-OS versions 10.2.7-x ant\u00e9rieures \u00e0 10.2.7-h32","product":{"name":"PAN-OS","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"PAN-OS versions ant\u00e9rieures \u00e0 11.1.13","product":{"name":"PAN-OS","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"PAN-OS versions 11.1.6-x ant\u00e9rieures \u00e0 11.1.6-h23","product":{"name":"PAN-OS","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"PAN-OS versions 11.1.10-x ant\u00e9rieures \u00e0 11.1.10-h9","product":{"name":"PAN-OS","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"Prisma Access versions 11.2 ant\u00e9rieures \u00e0 11.2.7-h8","product":{"name":"Prisma Access","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"PAN-OS versions 12.1.x ant\u00e9rieures \u00e0 12.1.3-h3","product":{"name":"PAN-OS","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"Prisma Access versions 10.2 ant\u00e9rieures \u00e0 10.2.10-h29","product":{"name":"Prisma Access","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"PAN-OS versions 11.2.4-x ant\u00e9rieures \u00e0 11.2.4-h15","product":{"name":"PAN-OS","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"PAN-OS versions 11.2.10-x ant\u00e9rieures \u00e0 11.2.10-h2","product":{"name":"PAN-OS","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"Prisma Browser ant\u00e9rieures \u00e0 143.37.2.193","product":{"name":"Prisma Access Browser","vendor":{"name":"Palo Alto Networks","scada":false}}},{"description":"PAN-OS versions ant\u00e9rieures \u00e0 12.1.4","product":{"name":"PAN-OS","vendor":{"name":"Palo Alto Networks","scada":false}}}],"affected_systems_content":"","content":"## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des correctifs (cf. section Documentation).","cves":[{"name":"CVE-2025-13720","url":"https://www.cve.org/CVERecord?id=CVE-2025-13720"},{"name":"CVE-2025-13638","url":"https://www.cve.org/CVERecord?id=CVE-2025-13638"},{"name":"CVE-2025-13633","url":"https://www.cve.org/CVERecord?id=CVE-2025-13633"},{"name":"CVE-2025-13636","url":"https://www.cve.org/CVERecord?id=CVE-2025-13636"},{"name":"CVE-2025-13637","url":"https://www.cve.org/CVERecord?id=CVE-2025-13637"},{"name":"CVE-2025-14372","url":"https://www.cve.org/CVERecord?id=CVE-2025-14372"},{"name":"CVE-2025-14766","url":"https://www.cve.org/CVERecord?id=CVE-2025-14766"},{"name":"CVE-2025-13630","url":"https://www.cve.org/CVERecord?id=CVE-2025-13630"},{"name":"CVE-2025-13634","url":"https://www.cve.org/CVERecord?id=CVE-2025-13634"},{"name":"CVE-2025-13223","url":"https://www.cve.org/CVERecord?id=CVE-2025-13223"},{"name":"CVE-2025-13632","url":"https://www.cve.org/CVERecord?id=CVE-2025-13632"},{"name":"CVE-2025-12726","url":"https://www.cve.org/CVERecord?id=CVE-2025-12726"},{"name":"CVE-2025-13640","url":"https://www.cve.org/CVERecord?id=CVE-2025-13640"},{"name":"CVE-2025-14373","url":"https://www.cve.org/CVERecord?id=CVE-2025-14373"},{"name":"CVE-2026-0227","url":"https://www.cve.org/CVERecord?id=CVE-2026-0227"},{"name":"CVE-2025-13635","url":"https://www.cve.org/CVERecord?id=CVE-2025-13635"},{"name":"CVE-2025-12725","url":"https://www.cve.org/CVERecord?id=CVE-2025-12725"},{"name":"CVE-2025-14174","url":"https://www.cve.org/CVERecord?id=CVE-2025-14174"},{"name":"CVE-2025-14765","url":"https://www.cve.org/CVERecord?id=CVE-2025-14765"},{"name":"CVE-2025-13639","url":"https://www.cve.org/CVERecord?id=CVE-2025-13639"},{"name":"CVE-2025-13224","url":"https://www.cve.org/CVERecord?id=CVE-2025-13224"},{"name":"CVE-2025-13042","url":"https://www.cve.org/CVERecord?id=CVE-2025-13042"},{"name":"CVE-2025-13721","url":"https://www.cve.org/CVERecord?id=CVE-2025-13721"},{"name":"CVE-2025-12729","url":"https://www.cve.org/CVERecord?id=CVE-2025-12729"},{"name":"CVE-2026-0628","url":"https://www.cve.org/CVERecord?id=CVE-2026-0628"},{"name":"CVE-2025-12728","url":"https://www.cve.org/CVERecord?id=CVE-2025-12728"},{"name":"CVE-2025-13631","url":"https://www.cve.org/CVERecord?id=CVE-2025-13631"},{"name":"CVE-2025-12727","url":"https://www.cve.org/CVERecord?id=CVE-2025-12727"}],"links":[],"reference":"CERTFR-2026-AVI-0049","revisions":[{"description":"Version initiale","revision_date":"2026-01-15T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Non sp\u00e9cifi\u00e9 par l'\u00e9diteur"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"},{"description":"\u00c9l\u00e9vation de privil\u00e8ges"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, un d\u00e9ni de service \u00e0 distance et un contournement de la politique de s\u00e9curit\u00e9.\n\nPalo Alto Networks a connaissance d'une preuve de concept pour la vuln\u00e9rabilit\u00e9 CVE-2026-0227.","title":"Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto Networks","vendor_advisories":[{"published_at":"2026-01-14","title":"Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2026-0001","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0001"},{"published_at":"2026-01-14","title":"Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0227","url":"https://security.paloaltonetworks.com/CVE-2026-0227"}]}