{"id":"CVE-2026-0286","title":"A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root.\n\n\n\nThe security risk posed by this issue is significantly m…","summary":"A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root.\n\n\n\nThe security risk posed by this issue is significantly m…","severity":"high","cvss":7.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-78"],"vendor":"paloaltonetworks","product":"pan-os","affected":["pan-os >= 10.2.0, < 10.2.7","pan-os >= 10.2.8, < 10.2.10","pan-os >= 10.2.11, < 10.2.13","pan-os >= 10.2.14, < 10.2.16","pan-os = 10.2.7","pan-os = 10.2.10","pan-os = 10.2.13","pan-os = 10.2.16","pan-os = 10.2.17","pan-os = 10.2.18","pan-os >= 11.1.0, < 11.1.4","pan-os >= 11.1.8, < 11.1.10","pan-os >= 11.1.11, < 11.1.13","pan-os >= 11.1.14, < 11.1.16","pan-os = 11.1.4","pan-os = 11.1.5","pan-os = 11.1.6","pan-os = 11.1.10","pan-os = 11.1.13","pan-os >= 11.2.0, < 11.2.4","pan-os >= 11.2.5, < 11.2.7","pan-os >= 11.2.8, < 11.2.10","pan-os >= 11.2.11, < 11.2.13","pan-os = 11.2.4","pan-os = 11.2.7","pan-os = 11.2.10","pan-os >= 12.1.2, < 12.1.4","pan-os >= 12.1.5, < 12.1.7","pan-os = 12.1.4","pan-os = 12.1.7"],"patched":["pan-os 12.1.7"],"published":"2026-07-09","updated":"2026-07-13","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-0286","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0286","label":"psirt@paloaltonetworks.com"}],"tags":["nvd"],"epss":0.01673,"epssPercentile":0.7543,"ingestedAt":"2026-07-13T13:27:18.384Z","slug":"CVE-2026-0286","body":"## Overview\n\nA command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root.\n\n\n\nThe security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators.\n\n\n\nThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).\n\n\n\nCloud NGFW and Prisma Access®  are not impacted by this vulnerability.\n\n## Affected\n\n- `pan-os >= 10.2.0, < 10.2.7`\n- `pan-os >= 10.2.8, < 10.2.10`\n- `pan-os >= 10.2.11, < 10.2.13`\n- `pan-os >= 10.2.14, < 10.2.16`\n- `pan-os = 10.2.7`\n- `pan-os = 10.2.10`\n- `pan-os = 10.2.13`\n- `pan-os = 10.2.16`\n- `pan-os = 10.2.17`\n- `pan-os = 10.2.18`\n- `pan-os >= 11.1.0, < 11.1.4`\n- `pan-os >= 11.1.8, < 11.1.10`\n- `pan-os >= 11.1.11, < 11.1.13`\n- `pan-os >= 11.1.14, < 11.1.16`\n- `pan-os = 11.1.4`\n- `pan-os = 11.1.5`\n- `pan-os = 11.1.6`\n- `pan-os = 11.1.10`\n- `pan-os = 11.1.13`\n- `pan-os >= 11.2.0, < 11.2.4`\n- `pan-os >= 11.2.5, < 11.2.7`\n- `pan-os >= 11.2.8, < 11.2.10`\n- `pan-os >= 11.2.11, < 11.2.13`\n- `pan-os = 11.2.4`\n- `pan-os = 11.2.7`\n- `pan-os = 11.2.10`\n- `pan-os >= 12.1.2, < 12.1.4`\n- `pan-os >= 12.1.5, < 12.1.7`\n- `pan-os = 12.1.4`\n- `pan-os = 12.1.7`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `pan-os 12.1.7`","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":39.6,"likelihood":0.3,"exploitation":0,"ransomware":0},"changes":[]}