PT-2026-56911 · Palo Alto Networks · Cloud Ngfw+2

Publicado 2026-07-09 · Atualizado 2026-07-09 · CVE-2026-0282

Mitre

CVSS v4.0

1.2

Baixa

Vetor base

AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to delete files from a temporary directory.

The security risk posed by this issue is minimized by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .

This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).

Cloud NGFW and Prisma® Access are not impacted by this vulnerability.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2026-0282

Produtos afetados

Cloud Ngfw

Pan-Os

Prisma Access

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-0282 · Nota de Segurança
• https://security.paloaltonetworks.com/CVE-2026-0282 · Aviso do Fabricante