EIP-2026-110451

This exploit demonstrates a CSRF vulnerability in Palo Alto Networks PANOS <= 5.0.8, allowing an attacker to upload a malicious certificate containing XSS payloads via the import.certificate.php endpoint. The certificate fields are not properly sanitized, enabling HTML injection into the web interface.