A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root.
The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators.
This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).
Cloud NGFW and Prisma Access® are not impacted by this vulnerability.
References
| Link | Resource |
|---|---|
| https://security.paloaltonetworks.com/CVE-2026-0286 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
13 Jul 2026, 12:28
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.2 |
| References | () https://security.paloaltonetworks.com/CVE-2026-0286 - Vendor Advisory | |
| First Time |
Paloaltonetworks
Paloaltonetworks pan-os |
|
| CPE | cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h5:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h8:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h5:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h25:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h12:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h13:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h6:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h1:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h6:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h10:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h9:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h34:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h18:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h5:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h5:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h34:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h23:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h7:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h19:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h24:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h19:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h6:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h17:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h2:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h2:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h4:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:-:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h7:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h10:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h1:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h17:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h6:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h7:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h15:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h10:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h4:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:-:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h23:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h1:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h1:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h27:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h3:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h7:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h29:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h9:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h37:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h12:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h10:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h1:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:-:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h22:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h21:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h8:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:-:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h35:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h8:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h2:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h17:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h22:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h1:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h4:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h7:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h20:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h11:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h9:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h9:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h15:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h17:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.5:*:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h14:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h34:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h7:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h3:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h1:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h11:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.17:*:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h4:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h14:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:-:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h4:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h7:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h15:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h21:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h6:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h21:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h32:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h3:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h2:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h14:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h33:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h18:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h32:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h13:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h2:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h7:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h9:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h31:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h12:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h6:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h2:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h12:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h2:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h20:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:-:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h10:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h7:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h12:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h14:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h14:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h13:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:-:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h28:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h1:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h18:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h1:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h7:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h8:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h22:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h11:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h8:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h7:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h10:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h3:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h4:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h18:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h5:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h1:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h5:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h32:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h3:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h16:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h7:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h18:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h25:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h21:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h5:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h4:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h30:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h6:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h6:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h11:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h10:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h16:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h27:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h4:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h33:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h26:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h3:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h21:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h2:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h11:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h15:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:-:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h8:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h13:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h3:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h36:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h1:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h2:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h5:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h25:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h3:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h15:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:-:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h18:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:-:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h10:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h17:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h27:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h5:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h6:*:*:*:*:*:* cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h17:*:*:*:*:*:* |
09 Jul 2026, 19:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-07-09 19:17
Updated : 2026-07-13 12:28
NVD link : CVE-2026-0286
Mitre link : CVE-2026-0286
CVE.ORG link : CVE-2026-0286
JSON object : View
Products Affected
paloaltonetworks
- pan-os
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
