Authenticated RCE Vulnerability CVE-2026-0330 in Palo Alto Networks PAN-OS Panorama
On November 11, 2026, Palo Alto Networks disclosed a critical security vulnerability identified as CVE-2026-0330 affecting its PAN-OS Panorama management platform. The flaw allows authenticated attackers to execute remote code, posing a significant risk to organizations using a wide range of PAN-OS Panorama versions from 10.2.0 through 12.2.4, including multiple intermediate builds and hotfixes. Exploitation requires authentication, which somewhat limits the attack surface to credentialed users, but the potential for remote code execution elevates the criticality of this vulnerability. Palo Alto Networks has published security advisories for these affected versions. Defenders should prioritize patching or mitigation based on the vendor's guidance.
Entenda a falha
A vulnerabilidade
CVE-2026-0330 is a critical authenticated remote code execution flaw in the Panorama management platform of Palo Alto Networks PAN-OS. The attacker must be authenticated, which limits exposure to credentialed users, but a successful attack gives remote code execution. The advisory lists a wide range of Panorama versions from 10.2.0 through 12.2.4, including many intermediate builds and hotfixes of the 11.1, 11.2, 12.1 and 12.2 branches. The excerpt of the advisory does not show the fixed versions, so check the vendor advisory for them.
Como foi descoberta
Palo Alto Networks disclosed the flaw on November 11, 2026 through a security advisory for Panorama. The available material does not say who found it or how, and it does not mention exploitation in the wild.
Explicação gerada por IA a partir da matéria e dos artigos, em 11/11/2026 14:17.
Linha do tempo
-
Authenticated RCE Vulnerability CVE-2026-0330 in Palo Alto Networks PAN-OS Panorama
ler a análise desta fonte ocultar
On November 11, 2026, Palo Alto Networks disclosed a critical security vulnerability identified as CVE-2026-0330 affecting its PAN-OS Panorama management platform. The flaw allows authenticated attackers to execute remote code, posing a significant risk to organizations using a wide range of PAN-OS Panorama versions from 10.2.0 through 12.2.4, including multiple intermediate builds and hotfixes. Exploitation requires authentication, which somewhat limits the attack surface to credentialed users, but the potential for remote code execution elevates the criticality of this vulnerability. Palo Alto Networks has published security advisories for these affected versions. Defenders should prioritize patching or mitigation based on the vendor's guidance.