Palo Alto Networks discloses CVE-2026-0320, authenticated admin command injection in PAN-OS
Palo Alto Networks PSIRT published advisory CVE-2026-0320, an authenticated admin command injection vulnerability in PAN-OS. The advisory lists a wide range of affected releases across the 10.2, 11.1, 11.2, 12.1 and 12.2 branches, including many hotfix builds. The excerpt provided does not mention active exploitation, a CVSS score, or fixed versions. Because administrator authentication is required, urgency is limited compared with unauthenticated flaws, but exposed management interfaces and compromised admin credentials raise the risk.
Technical Details
- Vulnerability class: command injection reachable by an authenticated administrator.
- Affected PAN-OS branches listed: 10.2.x, 11.1.x, 11.2.x, 12.1.x (up to 12.1.10) and 12.2.x (12.2.2, 12.2.3), including numerous hotfix (hN) builds.
- The excerpt gives no exploit details, proof of concept, or in-the-wild activity.
Linha do tempo
-
Palo Alto Networks discloses CVE-2026-0320, authenticated admin command injection in PAN-OS
ler a análise desta fonte ocultar
Palo Alto Networks PSIRT published advisory CVE-2026-0320, an authenticated admin command injection vulnerability in PAN-OS. The advisory lists a wide range of affected releases across the 10.2, 11.1, 11.2, 12.1 and 12.2 branches, including many hotfix builds. The excerpt provided does not mention active exploitation, a CVSS score, or fixed versions. Because administrator authentication is required, urgency is limited compared with unauthenticated flaws, but exposed management interfaces and compromised admin credentials raise the risk.
Technical Details
- Vulnerability class: command injection reachable by an authenticated administrator.
- Affected PAN-OS branches listed: 10.2.x, 11.1.x, 11.2.x, 12.1.x (up to 12.1.10) and 12.2.x (12.2.2, 12.2.3), including numerous hotfix (hN) builds.
- The excerpt gives no exploit details, proof of concept, or in-the-wild activity.