PT-2026-113729 · Palo Alto Networks · Cloud Ngfw+2
CVSS v4.0
8.5
High
| Vector | AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/AU:N/R:U/V:D/RE:M/U:Red |
Name of the Vulnerable Software and Affected Versions
PAN-OS (affected versions not specified)
Description
A remote code execution (RCE) issue in the management interface allows an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. This affects PA-Series and VM-Series firewalls, as well as Panorama virtual and M-Series. Real-world incidents have been reported where attackers are actively exploiting this flaw.
Recommendations
Restrict access to the management interface to only trusted internal IP addresses.
Enable Threat ID 510046 and 510047 from Applications and Threats content version 9159-10287 and later.
Fix
RCE
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cloud Ngfw
Pan-Os
Prisma Access