CVE-2026-0272

Vulnerability

A privilege escalation vulnerability exists in Palo Alto Networks PAN-OS software, affecting PA-Series, VM-Series firewalls, and Panorama (virtual and M-Series). An authenticated administrator with Command Line Interface (CLI) access can perform actions with root privileges. No special configuration is required to be affected by this issue [1].

Exploitation

An attacker requires authenticated administrator access to the Command Line Interface (CLI) of an affected PAN-OS device. Once authenticated, the attacker can execute commands that escalate their privileges to root [1].

Impact

Successful exploitation allows an attacker to perform actions on the device with root privileges. This could lead to a full compromise of the device's integrity and confidentiality, depending on the actions taken by the attacker [1].

Mitigation

Palo Alto Networks has not disclosed a fixed version for this vulnerability. They recommend securing management access by restricting CLI access to a limited group of administrators and limiting management interface access to trusted internal IP addresses as a best practice [1].