CVE-2026-0272

Katalog CVE

CVSS 7.2 · High EPSS 0,26%

Kerentanan Missing Authorization pada paloaltonetworks pan-os. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform actions on the device with root privileges. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators and by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

Rincian

Terbit di NVD

10 Juni 2026

Terakhir diubah

23 Juli 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-862: Missing Authorization
CWE-863: Incorrect Authorization

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 16,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 185 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://security.paloaltonetworks.com/CVE-2026-0272 advisory vendor
• https://cert-portal.siemens.com/productcert/html/ssa-104023.html