CVE-2026-0285 MEDIUM

Published: 2026-07-09 | Last Modified: 2026-08-11 | Status: Modified

Description

A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services. The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

CVSS Metrics

Base Score: 4.9 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	HIGH
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	HIGH
Availability Impact	NONE

Source: [email protected]

Type: Primary

Exploitability Score: 1.2

Impact Score: 3.6

Base Score: 4.7 (MEDIUM)

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

Attack Vector	NETWORK
Attack Complexity	LOW
Attack Requirements	NONE
Privileges Required	HIGH
User Interaction	NONE
Vulnerability Confidentiality	LOW
Vulnerability Integrity	HIGH
Vulnerability Availability	NONE
Subsequent Confidentiality	NONE
Subsequent Integrity	NONE
Subsequent Availability	NONE

Source: [email protected]

Type: Secondary

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-918

Affected Products

Vendor	Product	Version	Update	Type
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04cb3e380>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04cb3cb40>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d0a02a46c0>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d0a01b04c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3d4c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3d840>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d07e879480>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3e240>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3c400>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3c980>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73cfe6a89740>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3fdc0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3fc80>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3f7c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3ee80>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3c380>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3d0c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d07ed4e040>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3fec0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d0a02a7d00>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d0a01d3e40>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3cc40>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04c1e1900>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d07dae1bc0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d0e81ce240>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d07e879400>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cb3d900>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d0a834cc00>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04c1e21c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04c1e3080>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04c1e2c00>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04c1e12c0>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e0380>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e0200>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e1e80>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e1f80>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e2d00>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e0bc0>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e2300>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e3a80>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e1580>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e2840>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e0340>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e1f00>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e11c0>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e2980>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e3840>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e2400>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e2500>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e0580>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e36c0>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04c1e3e40>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee30140>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73cfece7e840>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73cfece7de40>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73cfece7ed40>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73cfece7edc0>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73cfece7d3c0>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73cfece7d100>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73cfece7c840>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73cfece7d640>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73cfece7cd40>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73cfece7f8c0>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73cfece7f040>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73cfece7e400>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73cfece7cc40>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73cfece7c640>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73cfece7c100>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73cfece7f380>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73cfece7ce40>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73cfece7c940>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73cfece7e2c0>	Operating System
paloaltonetworks	pan-os	10.2.17	<built-in method update of dict object at 0x73cfece7c380>	Operating System
paloaltonetworks	pan-os	10.2.18	<built-in method update of dict object at 0x73cfece7fb40>	Operating System
paloaltonetworks	pan-os	10.2.18	<built-in method update of dict object at 0x73d04ee31380>	Operating System
paloaltonetworks	pan-os	10.2.18	<built-in method update of dict object at 0x73d04c1e3f00>	Operating System
paloaltonetworks	pan-os	10.2.18	<built-in method update of dict object at 0x73d04c1e3fc0>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04c1e0800>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04c1e17c0>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04c1e3480>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04c1e1680>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e19c0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e2ec0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e2280>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e2b00>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e14c0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e2a00>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e0ac0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e0b00>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e1240>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e04c0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e2140>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e1480>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e0780>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e1dc0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e37c0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e1cc0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e1140>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e3c80>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e3e00>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e2380>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e0940>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04c1e2240>	Operating System
paloaltonetworks	pan-os	11.1.5	<built-in method update of dict object at 0x73d04c1e02c0>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e2440>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e0540>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e3dc0>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e0900>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e1d80>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e2c80>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e2e00>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e0680>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e3e80>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e3280>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e2480>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e2880>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e1740>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e0440>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e10c0>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e3600>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e2000>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e3ec0>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e2d40>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e0e40>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04c1e1380>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04c1e0b40>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04c1e1b80>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04c1e0400>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04c1e0c40>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04c1e1c00>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04c1e22c0>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04c1e1080>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04c1e1c80>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04c1e0740>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04c1e0980>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04c1e0300>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04c1e0e00>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04c1e32c0>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73d04c1e2680>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73d04c1e0480>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73d04c1e3680>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73d04c1e3380>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73d04c1e1780>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73d04c1e1a00>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73d04c1e3880>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73d04c1e0c80>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04c1e29c0>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04c1e3640>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04c1e0840>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04c1e1b00>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04c1e0d00>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04c1e3180>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04c1e2f80>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04c1e3780>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04c1e33c0>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04c1e2f00>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04c1e0140>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04c1e2740>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04c1e1ac0>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04c1e0fc0>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04c1e08c0>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04c1e15c0>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04ee31f80>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04ee32980>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04ee33900>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04ee30e00>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04ee317c0>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04ee32d00>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04ee323c0>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04ee33a00>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04ee32740>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04ee30d40>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04ee312c0>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04ee32f80>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04ee33e00>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04ee33a40>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04ee30c80>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04ee30ec0>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04ee32540>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04ee33880>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04ee31580>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04ee30f00>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04ee30fc0>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04ee31b40>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04ee32800>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04ee31f40>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04ee33a80>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04ee33f00>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04ee31280>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04ee33e80>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04ee33580>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04ee326c0>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73cfde594ac0>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73cfde595380>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73cfde594b00>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73cfde596c00>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73cfde597a40>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73cfde596f00>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73cfde595dc0>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73cfde595480>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73cfde594500>	Operating System
paloaltonetworks	pan-os	12.1.7	<built-in method update of dict object at 0x73cfde594fc0>	Operating System
paloaltonetworks	pan-os	12.1.7	<built-in method update of dict object at 0x73cfde597200>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h13::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h19::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h20::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h22::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h23::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h24::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h32::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h34::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h35::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h9::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h13::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h27::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h30::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h31::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h36::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h37::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h16::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h22::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.17:::::::*`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h7::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h13::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h25::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h27::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h32::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h33::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h34::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h9::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.5:::::::*`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h19::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h20::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h22::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h23::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h25::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h29::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h32::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h33::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h34::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h25::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h26::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h27::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h28::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h9::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h8::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h9::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h13::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h16::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h9::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h1::::::`

References

https://security.paloaltonetworks.com/CVE-2026-0285
Source: [email protected]

Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-104023.html
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e