Yüksek CVSS 7.2
CVE-2026-0261: Pan-os: işletim sistemi komut enjeksiyonu
Açıklama (NVD)
Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI or Web UI. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators and by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma Access® are not impacted by these vulnerabilities.
Özet bilgiler
- Ürün
- Paloaltonetworks Pan-os
- CVSS v3.1
- 7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS v4.0
- 6.1
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Amber - EPSS
- %1,40 (yüzdelik 73)
- CWE
- CWE-78
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| paloaltonetworks-pan-os | — | — | 10.2.7 |
| paloaltonetworks-pan-os | 10.2.8 | — | 10.2.10 |
| paloaltonetworks-pan-os | 10.2.11 | — | 10.2.13 |
| paloaltonetworks-pan-os | 10.2.14 | — | 10.2.16 |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |
| paloaltonetworks-pan-os | 10.2.7 | 10.2.7 | — |