CVE-2026-0273 HIGH

Published: 2026-06-10 | Last Modified: 2026-07-23 | Status: Modified

Description

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI or Web UI. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators and by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not affected by this vulnerability.

Additional Descriptions (1)

Una vulnerabilidad de inyección de comandos en el software PAN-OS® de Palo Alto Networks permite a un administrador autenticado eludir las restricciones del sistema y ejecutar comandos arbitrarios como usuario root. Para poder explotar este problema, el usuario debe tener acceso a la CLI o a la interfaz de usuario web de PAN-OS. El riesgo de seguridad que plantea este problema se minimiza significativamente cuando el acceso a la CLI está restringido a un grupo limitado de administradores y al restringir el acceso a la interfaz web de administración solo a direcciones IP internas de confianza, de acuerdo con nuestras pautas de implementación de mejores prácticas recomendadas https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431. Este problema es aplicable al software PAN-OS en firewalls de las series PA y VM y en Panorama (virtual y serie M). Cloud NGFW y Prisma® Access no se ven afectados por esta vulnerabilidad.

CVSS Metrics

Base Score: 7.2 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	HIGH
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	HIGH
Integrity Impact	HIGH
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.2

Impact Score: 5.9

Base Score: 6.1 (MEDIUM)

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

Attack Vector	NETWORK
Attack Complexity	LOW
Attack Requirements	NONE
Privileges Required	HIGH
User Interaction	NONE
Vulnerability Confidentiality	HIGH
Vulnerability Integrity	HIGH
Vulnerability Availability	HIGH
Subsequent Confidentiality	NONE
Subsequent Integrity	NONE
Subsequent Availability	NONE

Source: [email protected]

Type: Secondary

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-78

Affected Products

Vendor	Product	Version	Update	Type
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73cfece7f2c0>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04cb3c300>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04cb3cbc0>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04cb3e5c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73cfece7c940>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73cfece7ef00>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3d1c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3d340>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3dfc0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73cfece7db00>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d0a02a7e40>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3c100>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3dc00>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee31300>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee31800>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee32640>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee30880>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73cfece7e3c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3f740>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3ea00>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d07ebd4580>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee32280>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3eb00>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee33b40>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3d4c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3ca80>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee30c00>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73cfece7c600>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3e640>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee311c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee30040>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee32b40>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee317c0>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee31080>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee323c0>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee32200>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee33e00>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee33d00>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee30f00>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee33d80>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee32800>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee33e80>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee31880>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee31b80>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04cbfba40>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04cbfb580>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04cbfa300>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04cbfaf40>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04cbf84c0>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04cbfb6c0>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04cbfbe40>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d04cbfbf40>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d04cbfae00>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d2162ec600>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d07ebae7c0>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d07ebaf2c0>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d07ebac640>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d07ebaee80>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d07ebacb00>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d07ebae700>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d07ebac380>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d07ebafc00>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d07ebae100>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73d07ebac1c0>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73d07ebae840>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73d07ebad940>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73d07ebaec40>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73d07ebafdc0>	Operating System
paloaltonetworks	pan-os	10.2.17	<built-in method update of dict object at 0x73d07ebaec00>	Operating System
paloaltonetworks	pan-os	10.2.18	<built-in method update of dict object at 0x73d07ebadd40>	Operating System
paloaltonetworks	pan-os	10.2.18	<built-in method update of dict object at 0x73d07ebaef80>	Operating System
paloaltonetworks	pan-os	10.2.18	<built-in method update of dict object at 0x73d07ebac780>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d07ebae800>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d07ebafbc0>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d07ebad200>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d0a834c700>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04ee30300>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04ee33b00>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04ee32ec0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04ee30c80>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04ee33280>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04ee31a80>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04ee31b40>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04ee30180>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04ee31f40>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04ee33a80>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04ee33f00>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04ee33580>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04ee31280>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73cfe6a88b00>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73cfe6a8a440>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73cfe6a8b440>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73cfe6a8a980>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73cfe6a89800>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73cfe6a8a240>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73cfe6a8bac0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73cfe6a8bf80>	Operating System
paloaltonetworks	pan-os	11.1.5	<built-in method update of dict object at 0x73cfe6a8b140>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a8ac40>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a89b00>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a8be00>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a8bb00>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a89940>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a8bd80>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a8af80>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a88500>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a8b780>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a8b6c0>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a8b3c0>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a890c0>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a8b480>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a8ab40>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a88640>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a8a480>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a8ab00>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a88540>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a8a340>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73cfe6a8abc0>	Operating System
paloaltonetworks	pan-os	11.1.7	<built-in method update of dict object at 0x73cfe6a89840>	Operating System
paloaltonetworks	pan-os	11.1.7	<built-in method update of dict object at 0x73cfe6a89580>	Operating System
paloaltonetworks	pan-os	11.1.7	<built-in method update of dict object at 0x73cfe6a8b840>	Operating System
paloaltonetworks	pan-os	11.1.7	<built-in method update of dict object at 0x73cfe6a88300>	Operating System
paloaltonetworks	pan-os	11.1.7	<built-in method update of dict object at 0x73cfe6a88680>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73cfe6a8a280>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73cfe6a8bc80>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73cfe6a895c0>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73cfe6a8b700>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73cfe6a8b7c0>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73cfe6a89ac0>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73cfe6a89b40>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73cfe6a8a8c0>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73cfe6a8a700>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73cfe6a8b2c0>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73cfe6a89900>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73cfe6a8b940>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73cfe6a8a9c0>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73cfe6a8a5c0>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73cfe6a8a840>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73cfe6a89c40>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73cfe6a8bd40>	Operating System
paloaltonetworks	pan-os	11.1.14	<built-in method update of dict object at 0x73cfe6a8af40>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73cfe6a8a300>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73cfe6a894c0>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73cfe6a8a7c0>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73cfde594b00>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73cfde595940>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73cfde595a00>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73cfde595f40>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73cfde596c80>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73cfde596400>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73cfde595f00>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73cfde5955c0>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73cfde594800>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73cfde595700>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73cfde595380>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73cfde594180>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73cfde5950c0>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73cfde595840>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73cfde596440>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73cfde595540>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73cfde597b00>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73cfde597580>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73cfde594b40>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73cfde595900>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73cfde594200>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73cfde5969c0>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73cfde594700>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73cfde594ec0>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73cfde596300>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73cfde597d40>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73cfde594240>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73cfde5952c0>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73cfde596980>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73cfde595280>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73cfde597780>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73cfde595640>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73cfde595000>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73cfde594e40>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73cfde597ec0>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73cfde595ec0>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73cfde597740>	Operating System
paloaltonetworks	pan-os	11.2.11	<built-in method update of dict object at 0x73cfde596a00>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73cfde596100>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73cfde597e40>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73cfde597d80>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73cfde595d80>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73cfde596280>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73cfde5970c0>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73cfde594d40>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h13::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h19::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h20::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h22::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h23::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h24::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h32::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h34::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h9::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h13::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h27::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h30::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h31::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h36::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h16::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.17:::::::*`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h6::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h13::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h25::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h27::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h32::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h33::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h9::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.5:::::::*`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h19::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h20::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h22::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h23::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h25::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h29::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h32::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h34::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h25::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h26::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h9::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.14:-::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h9::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h13::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.11:-::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h6::::::`

References

https://security.paloaltonetworks.com/CVE-2026-0273
Source: [email protected]

Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-104023.html
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e