CVE-2026-0286 HIGH

Published: 2026-07-09 | Last Modified: 2026-08-11 | Status: Modified

Description

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma Access® are not impacted by this vulnerability.

CVSS Metrics

Base Score: 7.2 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	HIGH
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	HIGH
Integrity Impact	HIGH
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.2

Impact Score: 5.9

Base Score: 6.0 (MEDIUM)

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

Attack Vector	NETWORK
Attack Complexity	LOW
Attack Requirements	NONE
Privileges Required	HIGH
User Interaction	NONE
Vulnerability Confidentiality	HIGH
Vulnerability Integrity	HIGH
Vulnerability Availability	NONE
Subsequent Confidentiality	NONE
Subsequent Integrity	NONE
Subsequent Availability	NONE

Source: [email protected]

Type: Secondary

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-78

Affected Products

Vendor	Product	Version	Update	Type
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04ee30040>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d07e87abc0>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d0a01b5e80>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04ee30e00>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee31400>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee307c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee31280>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee31800>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee31240>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee329c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d07ecc0240>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d07e87ae00>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04cbfbfc0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d07e878d40>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee32040>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d07e87b880>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d07e879b00>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d0a8f0f600>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee33280>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d0a84e3440>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee33000>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d0ae839600>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee32d40>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee32f00>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d0ad1630c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04f106500>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d04ee30cc0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d07e87b840>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73cfe6a8a440>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d07e87a5c0>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d07ecc3140>	Operating System
paloaltonetworks	pan-os	10.2.7	<built-in method update of dict object at 0x73d0e81ce240>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d07ecc3d40>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d07ecc3300>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee32540>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d07ef0cbc0>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d0a8180100>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d07357ffc0>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73cfde2b7e80>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d07ef37240>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d07ef36580>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d07ef35ec0>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04f106c00>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ef77280>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee30c00>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee33a80>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73cfece7ee80>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04f105400>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee324c0>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ed14140>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d04ee30f00>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d07dae3040>	Operating System
paloaltonetworks	pan-os	10.2.10	<built-in method update of dict object at 0x73d0552adc80>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d07dae3900>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d04f104640>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d04ee31f40>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d07efad640>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d04ee32a00>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d073845140>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73cfdd990f40>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d04ee31580>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d07e87a6c0>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73cfe6a89500>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d07d505c80>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d04d1b5e00>	Operating System
paloaltonetworks	pan-os	10.2.13	<built-in method update of dict object at 0x73d06ce98ec0>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73d04f104240>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73d04ed86f80>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73d073884880>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73d04cf04580>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73d07d504440>	Operating System
paloaltonetworks	pan-os	10.2.16	<built-in method update of dict object at 0x73cfece7f180>	Operating System
paloaltonetworks	pan-os	10.2.17	<built-in method update of dict object at 0x73d0552af040>	Operating System
paloaltonetworks	pan-os	10.2.18	<built-in method update of dict object at 0x73cfe667fc00>	Operating System
paloaltonetworks	pan-os	10.2.18	<built-in method update of dict object at 0x73d0552af6c0>	Operating System
paloaltonetworks	pan-os	10.2.18	<built-in method update of dict object at 0x73d07eea62c0>	Operating System
paloaltonetworks	pan-os	10.2.18	<built-in method update of dict object at 0x73d07eea6e40>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d07eea7980>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d07eea5840>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d07eea5980>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d07eea6c40>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d07eea5f80>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d07eea4780>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d07eea5bc0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d07eea7f80>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d07eea7e80>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d07eea4140>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d07eea6880>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d07eea42c0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d07eea7480>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d07eea71c0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d07eea57c0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d07eea7800>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d07eea4240>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d07eea5940>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d07eea7ec0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d07eea6940>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04cb18400>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04cb1b6c0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04cb19bc0>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04cb1b340>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04cb1a740>	Operating System
paloaltonetworks	pan-os	11.1.4	<built-in method update of dict object at 0x73d04cb1bc80>	Operating System
paloaltonetworks	pan-os	11.1.5	<built-in method update of dict object at 0x73d04cb1a400>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb19740>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb18240>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb1bc40>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb18100>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb18e80>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb18dc0>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb1b100>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb1ba80>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb1aa00>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb1a880>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb19b40>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb1b600>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb19a80>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb19580>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb19140>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb1aa80>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb18840>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb1a680>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb18d40>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb1b540>	Operating System
paloaltonetworks	pan-os	11.1.6	<built-in method update of dict object at 0x73d04cb1aec0>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04cb192c0>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04cb1a240>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04cb18c80>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04cb1b700>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04cb1af80>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04cb19240>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04cb1bb40>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04cb18f80>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04cb1b880>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04cb1a080>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04cb19880>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04cb1b140>	Operating System
paloaltonetworks	pan-os	11.1.10	<built-in method update of dict object at 0x73d04cb1ba00>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73d04cb19100>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73d04cb1bc00>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73d04cb18080>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73d04cb1a580>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73d04cb19500>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73d04cb19a40>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73d04cb180c0>	Operating System
paloaltonetworks	pan-os	11.1.13	<built-in method update of dict object at 0x73d04cb18b40>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04cb18180>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04cb1a3c0>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04cb18800>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04cb18d80>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb1b8c0>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb195c0>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb1a180>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb1b980>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb19600>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb18280>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb18680>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb19b80>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb1a140>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb1ab40>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb1a380>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb1bfc0>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb18b80>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb1ae40>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb1b380>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb1b440>	Operating System
paloaltonetworks	pan-os	11.2.4	<built-in method update of dict object at 0x73d04cb1be80>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04cb1b640>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04cb199c0>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04cb1afc0>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04cb1b940>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04cb1a540>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04cb1af40>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04cb1b280>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04cb18640>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04cb19c00>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04cb19b00>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04cb18780>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04cb19980>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04cb1bb00>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04cb1a7c0>	Operating System
paloaltonetworks	pan-os	11.2.7	<built-in method update of dict object at 0x73d04cb1bdc0>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04cb18ac0>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04cb18940>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04cb18a80>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04cb18880>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04cb186c0>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04cb19e40>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04cb19200>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04cb198c0>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04cb1a9c0>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04cb181c0>	Operating System
paloaltonetworks	pan-os	11.2.10	<built-in method update of dict object at 0x73d04cb1aa40>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04cb18440>	Operating System
paloaltonetworks	pan-os	*	<built-in method update of dict object at 0x73d04cb19540>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73d04cb1b180>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73d04cb189c0>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73d04cb1a040>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73d04cb1a340>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73d04cb19840>	Operating System
paloaltonetworks	pan-os	12.1.4	<built-in method update of dict object at 0x73cfde596bc0>	Operating System
paloaltonetworks	pan-os	12.1.7	<built-in method update of dict object at 0x73cfde595700>	Operating System
paloaltonetworks	pan-os	12.1.7	<built-in method update of dict object at 0x73cfde594800>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h13::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h19::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h20::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h22::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h23::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h24::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h32::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h34::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h35::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h9::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h13::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h27::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h30::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h31::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h36::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h37::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h16::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h22::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.17:::::::*`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h7::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h13::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h25::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h27::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h32::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h33::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h34::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h9::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.5:::::::*`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h19::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h20::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h22::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h23::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h25::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h29::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h32::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h33::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h34::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h21::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h25::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h26::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h27::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h28::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h9::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h8::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h18::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h9::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h11::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h12::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h13::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h14::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h15::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h16::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h17::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h1::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h10::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h4::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h8::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h9::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os::::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h2::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h3::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h5::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h6::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h7::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:-::::::`
Yes	`cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h1::::::`

References

https://security.paloaltonetworks.com/CVE-2026-0286
Source: [email protected]

Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-104023.html
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e