CVE-2026-0272

EUVD-2026-36148
A privilege escalation vulnerability in Palo Alto Networks PAN-OS® software allows an authenticated administrator with access to the Command Line Interface (CLI) to perform actions on the device with root privileges.



The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators and by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .



This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).

Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 17%
Affected Products (NVD)
VendorProductVersion
paloaltonetworkspan-os
10.2.0 ≤
𝑥
< 10.2.7
paloaltonetworkspan-os
10.2.8 ≤
𝑥
< 10.2.10
paloaltonetworkspan-os
10.2.11 ≤
𝑥
< 10.2.13
paloaltonetworkspan-os
10.2.14 ≤
𝑥
< 10.2.16
paloaltonetworkspan-os
10.2.7
paloaltonetworkspan-os
10.2.7:h1
paloaltonetworkspan-os
10.2.7:h10
paloaltonetworkspan-os
10.2.7:h11
paloaltonetworkspan-os
10.2.7:h12
paloaltonetworkspan-os
10.2.7:h13
paloaltonetworkspan-os
10.2.7:h14
paloaltonetworkspan-os
10.2.7:h15
paloaltonetworkspan-os
10.2.7:h16
paloaltonetworkspan-os
10.2.7:h17
paloaltonetworkspan-os
10.2.7:h18
paloaltonetworkspan-os
10.2.7:h19
paloaltonetworkspan-os
10.2.7:h2
paloaltonetworkspan-os
10.2.7:h20
paloaltonetworkspan-os
10.2.7:h21
paloaltonetworkspan-os
10.2.7:h22
paloaltonetworkspan-os
10.2.7:h23
paloaltonetworkspan-os
10.2.7:h24
paloaltonetworkspan-os
10.2.7:h3
paloaltonetworkspan-os
10.2.7:h32
paloaltonetworkspan-os
10.2.7:h34
paloaltonetworkspan-os
10.2.7:h4
paloaltonetworkspan-os
10.2.7:h5
paloaltonetworkspan-os
10.2.7:h6
paloaltonetworkspan-os
10.2.7:h7
paloaltonetworkspan-os
10.2.7:h8
paloaltonetworkspan-os
10.2.7:h9
paloaltonetworkspan-os
10.2.10
paloaltonetworkspan-os
10.2.10:h1
paloaltonetworkspan-os
10.2.10:h10
paloaltonetworkspan-os
10.2.10:h11
paloaltonetworkspan-os
10.2.10:h12
paloaltonetworkspan-os
10.2.10:h13
paloaltonetworkspan-os
10.2.10:h14
paloaltonetworkspan-os
10.2.10:h17
paloaltonetworkspan-os
10.2.10:h18
paloaltonetworkspan-os
10.2.10:h2
paloaltonetworkspan-os
10.2.10:h21
paloaltonetworkspan-os
10.2.10:h27
paloaltonetworkspan-os
10.2.10:h3
paloaltonetworkspan-os
10.2.10:h30
paloaltonetworkspan-os
10.2.10:h31
paloaltonetworkspan-os
10.2.10:h36
paloaltonetworkspan-os
10.2.10:h4
paloaltonetworkspan-os
10.2.10:h5
paloaltonetworkspan-os
10.2.10:h6
paloaltonetworkspan-os
10.2.10:h7
paloaltonetworkspan-os
10.2.13
paloaltonetworkspan-os
10.2.13:h1
paloaltonetworkspan-os
10.2.13:h10
paloaltonetworkspan-os
10.2.13:h15
paloaltonetworkspan-os
10.2.13:h16
paloaltonetworkspan-os
10.2.13:h18
paloaltonetworkspan-os
10.2.13:h2
paloaltonetworkspan-os
10.2.13:h21
paloaltonetworkspan-os
10.2.13:h3
paloaltonetworkspan-os
10.2.13:h4
paloaltonetworkspan-os
10.2.13:h5
paloaltonetworkspan-os
10.2.13:h7
paloaltonetworkspan-os
10.2.16
paloaltonetworkspan-os
10.2.16:h1
paloaltonetworkspan-os
10.2.16:h4
paloaltonetworkspan-os
10.2.16:h6
paloaltonetworkspan-os
10.2.16:h7
paloaltonetworkspan-os
10.2.17
paloaltonetworkspan-os
10.2.18:h1
paloaltonetworkspan-os
11.1.0 ≤
𝑥
< 11.1.4
paloaltonetworkspan-os
11.1.8 ≤
𝑥
< 11.1.10
paloaltonetworkspan-os
11.1.11 ≤
𝑥
< 11.1.13
paloaltonetworkspan-os
11.1.4
paloaltonetworkspan-os
11.1.4:h1
paloaltonetworkspan-os
11.1.4:h10
paloaltonetworkspan-os
11.1.4:h11
paloaltonetworkspan-os
11.1.4:h12
paloaltonetworkspan-os
11.1.4:h13
paloaltonetworkspan-os
11.1.4:h15
paloaltonetworkspan-os
11.1.4:h17
paloaltonetworkspan-os
11.1.4:h18
paloaltonetworkspan-os
11.1.4:h2
paloaltonetworkspan-os
11.1.4:h25
paloaltonetworkspan-os
11.1.4:h27
paloaltonetworkspan-os
11.1.4:h3
paloaltonetworkspan-os
11.1.4:h32
paloaltonetworkspan-os
11.1.4:h4
paloaltonetworkspan-os
11.1.4:h5
paloaltonetworkspan-os
11.1.4:h6
paloaltonetworkspan-os
11.1.4:h7
paloaltonetworkspan-os
11.1.4:h8
paloaltonetworkspan-os
11.1.4:h9
paloaltonetworkspan-os
11.1.5
paloaltonetworkspan-os
11.1.6
paloaltonetworkspan-os
11.1.6:h1
paloaltonetworkspan-os
11.1.6:h10
paloaltonetworkspan-os
11.1.6:h14
paloaltonetworkspan-os
11.1.6:h17
paloaltonetworkspan-os
11.1.6:h18
paloaltonetworkspan-os
11.1.6:h19
paloaltonetworkspan-os
11.1.6:h2
paloaltonetworkspan-os
11.1.6:h20
paloaltonetworkspan-os
11.1.6:h21
paloaltonetworkspan-os
11.1.6:h22
paloaltonetworkspan-os
11.1.6:h23
paloaltonetworkspan-os
11.1.6:h25
paloaltonetworkspan-os
11.1.6:h29
paloaltonetworkspan-os
11.1.6:h3
paloaltonetworkspan-os
11.1.6:h32
paloaltonetworkspan-os
11.1.6:h34
paloaltonetworkspan-os
11.1.6:h4
paloaltonetworkspan-os
11.1.6:h6
paloaltonetworkspan-os
11.1.6:h7
paloaltonetworkspan-os
11.1.7
paloaltonetworkspan-os
11.1.7:h1
paloaltonetworkspan-os
11.1.7:h2
paloaltonetworkspan-os
11.1.7:h4
paloaltonetworkspan-os
11.1.7:h6
paloaltonetworkspan-os
11.1.10
paloaltonetworkspan-os
11.1.10:h1
paloaltonetworkspan-os
11.1.10:h10
paloaltonetworkspan-os
11.1.10:h12
paloaltonetworkspan-os
11.1.10:h21
paloaltonetworkspan-os
11.1.10:h25
paloaltonetworkspan-os
11.1.10:h26
paloaltonetworkspan-os
11.1.10:h27
paloaltonetworkspan-os
11.1.10:h28
paloaltonetworkspan-os
11.1.10:h4
paloaltonetworkspan-os
11.1.10:h5
paloaltonetworkspan-os
11.1.10:h7
paloaltonetworkspan-os
11.1.10:h9
paloaltonetworkspan-os
11.1.13
paloaltonetworkspan-os
11.1.13:h1
paloaltonetworkspan-os
11.1.13:h2
paloaltonetworkspan-os
11.1.13:h3
paloaltonetworkspan-os
11.1.13:h5
paloaltonetworkspan-os
11.1.13:h6
paloaltonetworkspan-os
11.2.0 ≤
𝑥
< 11.2.4
paloaltonetworkspan-os
11.2.5 ≤
𝑥
< 11.2.7
paloaltonetworkspan-os
11.2.8 ≤
𝑥
< 11.2.10
paloaltonetworkspan-os
11.2.4
paloaltonetworkspan-os
11.2.4:h1
paloaltonetworkspan-os
11.2.4:h10
paloaltonetworkspan-os
11.2.4:h11
paloaltonetworkspan-os
11.2.4:h12
paloaltonetworkspan-os
11.2.4:h14
paloaltonetworkspan-os
11.2.4:h15
paloaltonetworkspan-os
11.2.4:h17
paloaltonetworkspan-os
11.2.4:h2
paloaltonetworkspan-os
11.2.4:h3
paloaltonetworkspan-os
11.2.4:h4
paloaltonetworkspan-os
11.2.4:h5
paloaltonetworkspan-os
11.2.4:h6
paloaltonetworkspan-os
11.2.4:h7
paloaltonetworkspan-os
11.2.4:h8
paloaltonetworkspan-os
11.2.4:h9
paloaltonetworkspan-os
11.2.7
paloaltonetworkspan-os
11.2.7:h1
paloaltonetworkspan-os
11.2.7:h10
paloaltonetworkspan-os
11.2.7:h11
paloaltonetworkspan-os
11.2.7:h12
paloaltonetworkspan-os
11.2.7:h13
paloaltonetworkspan-os
11.2.7:h14
paloaltonetworkspan-os
11.2.7:h15
paloaltonetworkspan-os
11.2.7:h2
paloaltonetworkspan-os
11.2.7:h3
paloaltonetworkspan-os
11.2.7:h4
paloaltonetworkspan-os
11.2.7:h7
paloaltonetworkspan-os
11.2.7:h8
paloaltonetworkspan-os
11.2.10
paloaltonetworkspan-os
11.2.10:h1
paloaltonetworkspan-os
11.2.10:h2
paloaltonetworkspan-os
11.2.10:h3
paloaltonetworkspan-os
11.2.10:h4
paloaltonetworkspan-os
11.2.10:h5
paloaltonetworkspan-os
11.2.10:h6
paloaltonetworkspan-os
11.2.10:h7
paloaltonetworkspan-os
11.2.10:h8
paloaltonetworkspan-os
12.1.2 ≤
𝑥
< 12.1.4
paloaltonetworkspan-os
12.1.4
paloaltonetworkspan-os
12.1.4:h2
paloaltonetworkspan-os
12.1.4:h3
paloaltonetworkspan-os
12.1.4:h5
paloaltonetworkspan-os
12.1.4:h6
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
SiemensRUGGEDCOM APE1808
𝑥
< *
ADP
Common Weakness Enumeration
References
https://security.paloaltonetworks.com/CVE-2026-0272
https://cert-portal.siemens.com/productcert/html/ssa-104023.html