VulnSocial

CVE-2026-0272General(paloaltonetworks / pan-os)

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch paloaltonetworks pan-os systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform actions on the device with root privileges. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators and by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

paloaltonetworks CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-862CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • pan-os

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-06-19); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
paloaltonetworks
Products
pan-os

16 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-19: 1Mentions · 2026-07-09: 1Patch / Workaround · 2026-07-09: 1Technical Details · 2026-06-19: 1Technical Details · 2026-07-09: 106-1907-09
Signal classification2 categories
General
150.0%
Patch
150.0%
Referenced assets1 URL
Classification over time
DateTotalLabels
2026-06-191
General1
2026-07-091
Patch1
Full discourse2 posts
  • iototsecnews@iototsecnews
    General

    Palo Alto PAN-OS の脆弱性 CVE-2026-0273／0272／0269 が FIX：root 権限での任意のコマンドなど https://iototsecnews.jp/2026/06/12/palo-alto-pan-os-vulnerability-allows-attackers-to-execute-arbitrary-commands-as-root-user/ Palo Alto Networks の PAN-OS に見つかった、3 件の脆弱性について解説する記事です。不適切な入力処理により制限が回避され、root 権限で任意のコマンドを実行されてしまう CVE-2026-0273 や、 CLIにおける権限昇格の不具合である CVE-2026-0272 が存在します。また、トンネル・トラフィック処理におけるメモリ破損 CVE-2026-0269 が原因で、デバイスが繰り返し再起動してしまう問題も含まれています。ご利用のチームは、ご注意ください。 #CVE20260269 #CVE20260272 #CVE20260273 #PaloAlto #PANOS #Vulnerability

    Post summary

    The text reviews three PAN‑OS CVEs that enable root command execution, privilege escalation, and memory‑corruption reboots, but it lacks details on PoC, exploit code, active exploitation, or patch information.

    01000160
    499 followersView on X
  • Jaden Johnson@JadenJohnsNews
    Patch

    🚨 Patch now: Palo Alto Networks fixed CVE-2026-0272, a privilege escalation flaw in PAN-OS. An authenticated low-privileged admin could bypass restrictions and execute unauthorized administrative actions via the CLI. #CyberSecurity #InfoSec #PaloAltoNetworks https://t.co/xxtn1gj8Bl

    Post summary

    Palo Alto Networks has released a patch for CVE‑2026‑0272, a privilege escalation flaw in PAN‑OS that allows authenticated low‑privileged administrators to execute unauthorized actions via the CLI.

    00000657
    229 followersView on X
CPE platform detail175 entries

175 of 175 entries

PartVendorProductVersionTarget SWTarget HW
OSpaloaltonetworkspan-os---
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.10--
OSpaloaltonetworkspan-os10.2.13--
OSpaloaltonetworkspan-os10.2.13--
OSpaloaltonetworkspan-os10.2.13--
OSpaloaltonetworkspan-os10.2.13--
OSpaloaltonetworkspan-os10.2.13--
OSpaloaltonetworkspan-os10.2.13--
OSpaloaltonetworkspan-os10.2.13--
OSpaloaltonetworkspan-os10.2.13--
OSpaloaltonetworkspan-os10.2.13--
OSpaloaltonetworkspan-os10.2.13--
OSpaloaltonetworkspan-os10.2.13--
OSpaloaltonetworkspan-os10.2.13--
OSpaloaltonetworkspan-os10.2.16--
OSpaloaltonetworkspan-os10.2.16--
OSpaloaltonetworkspan-os10.2.16--
OSpaloaltonetworkspan-os10.2.16--
OSpaloaltonetworkspan-os10.2.16--
OSpaloaltonetworkspan-os10.2.17--
OSpaloaltonetworkspan-os10.2.18--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os10.2.7--
OSpaloaltonetworkspan-os11.1.10--
OSpaloaltonetworkspan-os11.1.10--
OSpaloaltonetworkspan-os11.1.10--
OSpaloaltonetworkspan-os11.1.10--
OSpaloaltonetworkspan-os11.1.10--
OSpaloaltonetworkspan-os11.1.10--
OSpaloaltonetworkspan-os11.1.10--
OSpaloaltonetworkspan-os11.1.10--
OSpaloaltonetworkspan-os11.1.10--
OSpaloaltonetworkspan-os11.1.10--
OSpaloaltonetworkspan-os11.1.10--
OSpaloaltonetworkspan-os11.1.10--
OSpaloaltonetworkspan-os11.1.10--
OSpaloaltonetworkspan-os11.1.13--
OSpaloaltonetworkspan-os11.1.13--
OSpaloaltonetworkspan-os11.1.13--
OSpaloaltonetworkspan-os11.1.13--
OSpaloaltonetworkspan-os11.1.13--
OSpaloaltonetworkspan-os11.1.13--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.4--
OSpaloaltonetworkspan-os11.1.5--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.6--
OSpaloaltonetworkspan-os11.1.7--
OSpaloaltonetworkspan-os11.1.7--
OSpaloaltonetworkspan-os11.1.7--
OSpaloaltonetworkspan-os11.1.7--
OSpaloaltonetworkspan-os11.1.7--
OSpaloaltonetworkspan-os11.2.10--
OSpaloaltonetworkspan-os11.2.10--
OSpaloaltonetworkspan-os11.2.10--
OSpaloaltonetworkspan-os11.2.10--
OSpaloaltonetworkspan-os11.2.10--
OSpaloaltonetworkspan-os11.2.10--
OSpaloaltonetworkspan-os11.2.10--
OSpaloaltonetworkspan-os11.2.10--
OSpaloaltonetworkspan-os11.2.10--
OSpaloaltonetworkspan-os11.2.4--
OSpaloaltonetworkspan-os11.2.4--
OSpaloaltonetworkspan-os11.2.4--
OSpaloaltonetworkspan-os11.2.4--
OSpaloaltonetworkspan-os11.2.4--
OSpaloaltonetworkspan-os11.2.4--
OSpaloaltonetworkspan-os11.2.4--
OSpaloaltonetworkspan-os11.2.4--
OSpaloaltonetworkspan-os11.2.4--
OSpaloaltonetworkspan-os11.2.4--
OSpaloaltonetworkspan-os11.2.4--
OSpaloaltonetworkspan-os11.2.4--
OSpaloaltonetworkspan-os11.2.4--
OSpaloaltonetworkspan-os11.2.4--
OSpaloaltonetworkspan-os11.2.4--
OSpaloaltonetworkspan-os11.2.4--
OSpaloaltonetworkspan-os11.2.7--
OSpaloaltonetworkspan-os11.2.7--
OSpaloaltonetworkspan-os11.2.7--
OSpaloaltonetworkspan-os11.2.7--
OSpaloaltonetworkspan-os11.2.7--
OSpaloaltonetworkspan-os11.2.7--
OSpaloaltonetworkspan-os11.2.7--
OSpaloaltonetworkspan-os11.2.7--
OSpaloaltonetworkspan-os11.2.7--
OSpaloaltonetworkspan-os11.2.7--
OSpaloaltonetworkspan-os11.2.7--
OSpaloaltonetworkspan-os11.2.7--
OSpaloaltonetworkspan-os11.2.7--
OSpaloaltonetworkspan-os12.1.4--
OSpaloaltonetworkspan-os12.1.4--
OSpaloaltonetworkspan-os12.1.4--
OSpaloaltonetworkspan-os12.1.4--
OSpaloaltonetworkspan-os12.1.4--

Explore more

Back to dashboardpaloaltonetworks CVEspan-os vulnerabilities