Skip to content
Threat Feed
Subscribe

Product

PA-Series Firewalls

2 briefs RSS
medium threat

CVE-2026-0286 PAN-OS: Authenticated Command Injection in CLI

A command injection vulnerability, CVE-2026-0286, in the management plane of Palo Alto Networks PAN-OS software allows an authenticated administrator to execute arbitrary OS commands as root on PA-Series and VM-Series firewalls and Panorama (virtual and M-Series) devices, potentially leading to high system compromise.

exploited PAN-OS 12.1 +6 vulnerability command-injection pan-os firewall network-device
3t
critical advisory

PAN-OS Authentication Portal Remote Code Execution Vulnerability

An unauthenticated remote code execution vulnerability exists in the PAN-OS Authentication Portal (Captive Portal) service, potentially allowing attackers to execute arbitrary code with root privileges on PA-Series and VM-Series firewalls by sending crafted network packets.

PAN-OS +2 vulnerability rce network
2r 1t