Palo Alto Networks · Panorama · CVE-2026-0273
**Name of the Vulnerable Software and Affected Versions**
PAN-OS versions 10.2 (affected versions not specified)
PAN-OS versions 11.1 (affected versions not specified)
PAN-OS versions 11.2 (affected versions not specified)
PAN-OS versions 12.1 (affected versions not specified)
**Description**
A command injection issue in PAN-OS software allows an authenticated administrator to bypass system restrictions and execute arbitrary commands with root privileges. This can be achieved through the CLI or the web management interface. The issue affects PA-Series and VM-Series firewalls, as well as Panorama virtual and M-Series appliances.
**Recommendations**
Update PAN-OS version 10.2 to the patched release.
Update PAN-OS version 11.1 to the patched release.
Update PAN-OS version 11.2 to the patched release.
Update PAN-OS version 12.1 to the patched release.
Restrict CLI access to a limited group of administrators.
Restrict access to the management web interface to trusted internal IP addresses.