7.2

CVE-2026-0272

PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)

A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform actions on the device with root privileges.



The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators and by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .



This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).

Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Paloaltonetworks ≫ Pan-os Version >= 10.2.0 < 10.2.7
Paloaltonetworks ≫ Pan-os Version >= 10.2.8 < 10.2.10
Paloaltonetworks ≫ Pan-os Version >= 10.2.11 < 10.2.13
Paloaltonetworks ≫ Pan-os Version >= 10.2.14 < 10.2.16
Paloaltonetworks ≫ Pan-os Version10.2.7 Update-
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh1
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh10
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh11
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh12
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh13
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh14
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh15
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh16
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh17
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh18
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh19
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh2
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh20
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh21
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh22
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh23
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh24
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh3
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh32
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh34
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh4
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh5
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh6
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh7
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh8
Paloaltonetworks ≫ Pan-os Version10.2.7 Updateh9
Paloaltonetworks ≫ Pan-os Version10.2.10 Update-
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh1
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh10
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh11
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh12
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh13
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh14
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh17
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh18
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh2
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh21
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh27
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh3
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh30
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh31
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh36
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh4
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh5
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh6
Paloaltonetworks ≫ Pan-os Version10.2.10 Updateh7
Paloaltonetworks ≫ Pan-os Version10.2.13 Update-
Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh1
Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh10
Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh15
Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh16
Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh18
Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh2
Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh21
Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh3
Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh4
Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh5
Paloaltonetworks ≫ Pan-os Version10.2.13 Updateh7
Paloaltonetworks ≫ Pan-os Version10.2.16 Update-
Paloaltonetworks ≫ Pan-os Version10.2.16 Updateh1
Paloaltonetworks ≫ Pan-os Version10.2.16 Updateh4
Paloaltonetworks ≫ Pan-os Version10.2.16 Updateh6
Paloaltonetworks ≫ Pan-os Version10.2.16 Updateh7
Paloaltonetworks ≫ Pan-os Version10.2.17
Paloaltonetworks ≫ Pan-os Version10.2.18 Updateh1
Paloaltonetworks ≫ Pan-os Version >= 11.1.0 < 11.1.4
Paloaltonetworks ≫ Pan-os Version >= 11.1.8 < 11.1.10
Paloaltonetworks ≫ Pan-os Version >= 11.1.11 < 11.1.13
Paloaltonetworks ≫ Pan-os Version11.1.4 Update-
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh1
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh10
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh11
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh12
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh13
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh15
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh17
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh18
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh2
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh25
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh27
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh3
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh32
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh4
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh5
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh6
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh7
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh8
Paloaltonetworks ≫ Pan-os Version11.1.4 Updateh9
Paloaltonetworks ≫ Pan-os Version11.1.5
Paloaltonetworks ≫ Pan-os Version11.1.6 Update-
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh1
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh10
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh14
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh17
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh18
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh19
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh2
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh20
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh21
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh22
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh23
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh25
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh29
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh3
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh32
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh34
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh4
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh6
Paloaltonetworks ≫ Pan-os Version11.1.6 Updateh7
Paloaltonetworks ≫ Pan-os Version11.1.7 Update-
Paloaltonetworks ≫ Pan-os Version11.1.7 Updateh1
Paloaltonetworks ≫ Pan-os Version11.1.7 Updateh2
Paloaltonetworks ≫ Pan-os Version11.1.7 Updateh4
Paloaltonetworks ≫ Pan-os Version11.1.7 Updateh6
Paloaltonetworks ≫ Pan-os Version11.1.10 Update-
Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh1
Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh10
Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh12
Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh21
Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh25
Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh26
Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh27
Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh28
Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh4
Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh5
Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh7
Paloaltonetworks ≫ Pan-os Version11.1.10 Updateh9
Paloaltonetworks ≫ Pan-os Version11.1.13 Update-
Paloaltonetworks ≫ Pan-os Version11.1.13 Updateh1
Paloaltonetworks ≫ Pan-os Version11.1.13 Updateh2
Paloaltonetworks ≫ Pan-os Version11.1.13 Updateh3
Paloaltonetworks ≫ Pan-os Version11.1.13 Updateh5
Paloaltonetworks ≫ Pan-os Version11.1.13 Updateh6
Paloaltonetworks ≫ Pan-os Version >= 11.2.0 < 11.2.4
Paloaltonetworks ≫ Pan-os Version >= 11.2.5 < 11.2.7
Paloaltonetworks ≫ Pan-os Version >= 11.2.8 < 11.2.10
Paloaltonetworks ≫ Pan-os Version11.2.4 Update-
Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh1
Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh10
Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh11
Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh12
Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh14
Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh15
Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh17
Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh2
Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh3
Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh4
Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh5
Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh6
Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh7
Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh8
Paloaltonetworks ≫ Pan-os Version11.2.4 Updateh9
Paloaltonetworks ≫ Pan-os Version11.2.7 Update-
Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh1
Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh10
Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh11
Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh12
Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh13
Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh14
Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh15
Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh2
Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh3
Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh4
Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh7
Paloaltonetworks ≫ Pan-os Version11.2.7 Updateh8
Paloaltonetworks ≫ Pan-os Version11.2.10 Update-
Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh1
Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh2
Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh3
Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh4
Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh5
Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh6
Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh7
Paloaltonetworks ≫ Pan-os Version11.2.10 Updateh8
Paloaltonetworks ≫ Pan-os Version >= 12.1.2 < 12.1.4
Paloaltonetworks ≫ Pan-os Version12.1.4 Update-
Paloaltonetworks ≫ Pan-os Version12.1.4 Updateh2
Paloaltonetworks ≫ Pan-os Version12.1.4 Updateh3
Paloaltonetworks ≫ Pan-os Version12.1.4 Updateh5
Paloaltonetworks ≫ Pan-os Version12.1.4 Updateh6
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.176
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
psirt@paloaltonetworks.com 6 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Amber
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://security.paloaltonetworks.com/CVE-2026-0272
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-104023.html