🔐 CVE Alert

CVE-2026-0272

UNKNOWN 0.0

PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform actions on the device with root privileges. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators and by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

CWE CWE-862
Vendor palo alto networks
Product cloud ngfw
Published Jun 10, 2026
Stay Ahead of the Next One

Get instant alerts for palo alto networks cloud ngfw

Be the first to know when new unknown vulnerabilities affecting palo alto networks cloud ngfw are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Palo Alto Networks / Cloud NGFW
All versions affected
Palo Alto Networks / PAN-OS
12.1.0 < 12.1.4-h7 11.2.0 < 11.2.4-h18 11.1.0 < 11.1.4-h34 10.2.0 < 10.2.7-h35
Palo Alto Networks / Prisma Access
All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗
security.paloaltonetworks.com: https://security.paloaltonetworks.com/CVE-2026-0272

Credits

Palo Alto Networks thanks an external reporter, Frigo, for discovering and reporting this issue.