Skip to content
OpenAdvisories
Medium WID-SEC-2026-1874 4 CVEs

Palo Alto Networks PAN-OS: Mehrere Schwachstellen

Published Jun 10, 2026 · Updated Jun 10, 2026 · de-DE

Vendor: Palo Alto Networks Product: PAN-OS

Summary

Ein Angreifer kann mehrere Schwachstellen in Palo Alto Networks PAN-OS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Administratorrechte zu erlangen, beliebigen Code als Root auszuführen oder einen Denial-of-Service-Zustand zu verursachen.

Product

PAN-OS ist das Betriebssystem der Sicherheitssysteme / Firewalls der Firma Palo Alto Networks.

Vulnerabilities 4

  • Medium 5.7
    CVE-2026-0273 Public exploit

    PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI

    A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS …

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 5.6
    CVE-2026-0272

    PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)

    A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform actions on the device with root privileges. The security risk posed by this issue is s…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 4.6
    CVE-2026-0269

    PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing

    A memory corruption vulnerability in the processing of tunnel traffic in Palo Alto Networks PAN-OS® software allows an authenticated user to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Low 0.4
    CVE-2026-0266

    PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface

    A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series fir…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Revision history

  1. #1

    Initiale Fassung

References