CVE-2026-0272 HIGH

Published: 2026-06-10 | Last Modified: 2026-07-14 | Status: Modified

Description

A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform actions on the device with root privileges. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators and by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

CVSS Metrics

Base Score: 7.2 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	HIGH
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	HIGH
Integrity Impact	HIGH
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.2

Impact Score: 5.9

Base Score: 6.0 (MEDIUM)

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Amber

Attack Vector	NETWORK
Attack Complexity	LOW
Attack Requirements	NONE
Privileges Required	HIGH
User Interaction	NONE
Vulnerability Confidentiality	HIGH
Vulnerability Integrity	HIGH
Vulnerability Availability	NONE
Subsequent Confidentiality	NONE
Subsequent Integrity	NONE
Subsequent Availability	NONE

Source: [email protected]

Type: Secondary

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-862
[email protected]	Primary	en CWE-863

Affected Products

Vendor	Product	Version	Update	Type
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x702bdc60e940>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x702ba705ec80>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x702ba705d180>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x702bdc60c2c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702bdc60ce80>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702bdc60eb00>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702ba705e100>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702ba705d200>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702ba705c780>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702bdc60d080>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702bdd6ae240>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702ba705f6c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702b80610400>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702bdd12aa40>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702ba705c480>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702bdd6aee80>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702ba705f540>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702bdd6aea80>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702bdd6ad340>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702bdd6afe40>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702bdc60d940>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702ba705d5c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702bdd6ad440>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702ba705c280>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702bdd6adb80>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702b80612600>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702bdc60d0c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702bdc60ef40>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702bdd6ac140>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702ba705df40>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x702ba705c340>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702ba705f080>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702bfc334c40>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702bfc337180>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702bfc336c80>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702ba705c0c0>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702bfc337900>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702bfc337fc0>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702bfc336380>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702bfc336400>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702bfc334980>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702bfc337600>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702bfc336800>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702bfc336f80>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702bfc336580>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702ba705e140>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702ba705f400>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702ba705fec0>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702ba705d900>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702ba705cf40>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x702ba705d2c0>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x702ba705ec40>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x702ba705dc80>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x702ba705cac0>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x702ba705e6c0>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x702bdc50f040>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x702bfc337880>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x702bfc334340>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x702bfc336a00>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x702bdc50f000>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x702bfc336e00>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x702bfc336d80>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x702bfc335e80>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x702bfc336040>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x702bfc334680>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x702bfc335780>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x702ba414df40>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x702bfc337e40>	Operating System
paloaltonetworks	pan-os	10.2.17	<built-in method update of dict object at 0x702bfc334cc0>	Operating System
paloaltonetworks	pan-os	10.2.18	<built-in method update of dict object at 0x702bdc50d980>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x702bdd12a940>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x702b832ee940>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x702bdd3dcbc0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702b832ef000>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702b832ec500>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a5400>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a4480>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a7f80>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a74c0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a4600>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a4c00>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a4a80>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a7d00>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a6b00>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a4100>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a72c0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a6d80>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a4ec0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a42c0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a7800>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a4780>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a7140>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x702bdc6a7280>	Operating System
paloaltonetworks	pan-os	11.1.5	<built-in method update of dict object at 0x702bdc6a6680>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a7540>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a6500>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a5c00>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a49c0>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a7d40>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a5d80>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a43c0>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a57c0>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a64c0>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a7fc0>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a68c0>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a7440>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a7c40>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a7700>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a5280>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a7cc0>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a5e40>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a7940>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a5800>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x702bdc6a5940>	Operating System
paloaltonetworks	pan-os	11.1.7	<built-in method update of dict object at 0x702bdc6a6f00>	Operating System
paloaltonetworks	pan-os	11.1.7	<built-in method update of dict object at 0x702bdc6a79c0>	Operating System
paloaltonetworks	pan-os	11.1.7	<built-in method update of dict object at 0x702bdc6a5440>	Operating System
paloaltonetworks	pan-os	11.1.7	<built-in method update of dict object at 0x702bdc6a6600>	Operating System
paloaltonetworks	pan-os	11.1.7	<built-in method update of dict object at 0x702bdc6a4580>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x702bdc6a4e80>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x702bdc6a4d80>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x702bdc6a54c0>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x702bdc6a62c0>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x702bdc6a5500>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x702bdc6a6040>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x702bdc6a4e00>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x702bdc6a5780>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x702bdc6a6b40>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x702bdc6a6a00>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x702bdc6a4d40>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x702bdc6a6200>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x702bdc6a6240>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x702bdc6a4fc0>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x702bdc6a48c0>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x702bdc6a56c0>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x702bdc6a7d80>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x702bdc6a6d00>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x702bdc6a7040>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x702bdc6a5040>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x702bdc6a7480>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x702bdc6a61c0>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x702bdc6a7b40>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x702bdc6a4f00>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x702bdc6a5100>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x702bdc6a6700>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x702bdc6a6900>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x702bdc6a5080>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x702bdc6a7ac0>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x702bdc6a5e00>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x702bdc6a6c00>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x702bdc6a6480>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x702bdc6a4c80>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x702bdc6a4640>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x702bdc6a5f80>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x702bdc6a7640>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x702bdc6a4740>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x702bdc6a4200>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x702bdc6a4bc0>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x702bdc6a4880>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x702bdc6a5700>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x702bdc6a5ac0>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x702bdd26dbc0>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x702bdd26c240>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x702bdd26c100>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x702bdd26c700>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x702bdd26c9c0>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x702bdd26d900>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x702bdd26c380>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x702bdd26da00>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x702bdd26f3c0>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x702bdd26c200>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x702bdd26ec40>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x702bdd26dd80>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x702bdd26d700>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x702bdd26eb80>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x702bdd26f000>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x702bdd26c580>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x702bdd26cb00>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x702bdd26ef80>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x702bdd26dac0>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x702bdd26c8c0>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x702bdd26c7c0>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x702bdd26f200>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x702bdd26eac0>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x702bdd26c180>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h13::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h19::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h20::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h22::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h23::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h24::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h32::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h34::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h9::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h13::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h27::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h30::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h31::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h36::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h16::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.17:::::::*`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h1::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h13::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h25::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h27::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h32::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h9::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.5:::::::*`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h19::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h20::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h22::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h23::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h25::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h29::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h32::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h34::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h25::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h26::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h27::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h28::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h9::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h6::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h9::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h13::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h8::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h6::::::`

References

https://security.paloaltonetworks.com/CVE-2026-0272
Source: [email protected]

Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-104023.html
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e