Description
An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to tamper with the physical file system to elevate privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | PAN-OS | 10.1.0 – < 10.1.14-h2, 10.2.0 – < 10.2.10, 11.0.0 – < 11.0.5, 11.1.0 – < 11.1.4, 11.2.0 – < 11.2.1 | 10.1.14-h2 |
| Palo Alto Networks | Cloud NGFW | None | All |
| Palo Alto Networks | Prisma Access | None | All |
Advisories 3
- ICSA-24-193-11 Siemens RUGGEDCOM APE 1808 CISA ICS & IT advisories · Jan 14, 2026
- SSA-364175 SSA-364175: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.4-h1 Siemens ProductCERT · Jan 13, 2026
- WID-SEC-2024-1586 PaloAlto Networks PAN-OS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 10, 2024