Loading vulnerability…
Authenticated Administrator Command Injection in Palo Alto Networks PAN-OS
CVE-2026-0273 is a command injection vulnerability in Palo Alto Networks PAN-OS that allows an authenticated administrator with CLI or Web UI access to bypass system restrictions and execute arbitrary operating-system commands as root. The vulnerability stems from improper input handling and affects specific releases in the PAN-OS 12.1, 11.2, 11.1, and 10.2 branches on PA-Series and VM-Series firewalls and Panorama virtual and M-Series appliances. Cloud NGFW and Prisma Access are not affected.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation bypasses administrative restrictions and permits arbitrary command execution with root privileges, resulting in full device compromise. An attacker could access or modify device data and configuration and interfere with firewall or management operations.
If you can’t patch tonight, do this now.
Limit CLI access to a small group of trusted administrators, restrict the management Web UI to trusted internal IP addresses, and use hardened jump hosts for administrative access. These restrictions reduce exposure but do not remove the vulnerability. Customers with Threat Prevention can enable dedicated signatures for this vulnerability where management traffic can be inspected and decrypted.
Patch, then assume compromise.
Upgrade to an applicable vendor-fixed PAN-OS release. Listed fixes for CVE-2026-0273 include: 12.1.4-h7 and 12.1.7; 11.2.4-h18, 11.2.7-h16, 11.2.10-h9, and 11.2.12; 11.1.4-h34, 11.1.6-h33, 11.1.7-h7, 11.1.10-h27, 11.1.13-h7, and 11.1.15; and 10.2.7-h35, 10.2.10-h37, 10.2.13-h22, 10.2.16-h8, and 10.2.18-h7. Select the appropriate fixed release for the installed maintenance branch using the vendor advisory. Upgrade unsupported branches to a supported fixed release. For RUGGEDCOM APE1808 deployments using Palo Alto Networks Virtual NGFW, obtain deployment-specific update guidance from Siemens customer support.
No validated public exploits yet. Hidden: 1 rejected by Mallory's analysis as not a working exploit.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
9 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.