CVE-2026-0261

What it is

Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI or Web UI. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators and by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma Access® are not impacted by these vulnerabilities.

At a glance

Exploitability

Can be exploited over the network with an admin-level account. High risk of data exposure, data tampering, service disruption.

Exploit odds

1.4% chance of exploitation in the next 30 days (EPSS).

Fix

A patch, advisory or fixed version is referenced. Upgrade or apply it.

Timeline

1. 2026-05-13 19:17 UTC PublishedDisclosed publicly on CVE.org and NVD
2. 2026-10-26 17:10 UTC Last updatedMost recent change to the record

Details

Published

2026-05-13 19:17 UTC

Last modified

2026-10-26 17:10 UTC

Exploit probability

1.4% · EPSS, next 30 days

Weakness

CWE-78 · OS command injection

Record status

Analyzed

Affected

• Paloaltonetworks pan-os < 10.2.7
• Paloaltonetworks pan-os < 10.2.10
• Paloaltonetworks pan-os < 10.2.13
• Paloaltonetworks pan-os < 10.2.16
• Paloaltonetworks pan-os 10.2.7
• Paloaltonetworks pan-os 10.2.10
• Paloaltonetworks pan-os 10.2.13
• Paloaltonetworks pan-os 10.2.16

Attack profile CVSS 4.0 · 6.1

Attack vector

Network

Complexity

Low

Attack requirements

None

Privileges needed

High

User interaction

None

Confidentiality

High

Integrity

High

Availability

High