Skip to content
Threat Feed
Subscribe

Product

Panorama (Virtual and M-Series)

2 briefs RSS
medium threat

CVE-2026-0286 PAN-OS: Authenticated Command Injection in CLI

A command injection vulnerability, CVE-2026-0286, in the management plane of Palo Alto Networks PAN-OS software allows an authenticated administrator to execute arbitrary OS commands as root on PA-Series and VM-Series firewalls and Panorama (virtual and M-Series) devices, potentially leading to high system compromise.

exploited PAN-OS 12.1 +6 vulnerability command-injection pan-os firewall network-device
3t
high advisory

CVE-2026-0265 PAN-OS Authentication Bypass with Cloud Authentication Service (CAS)

CVE-2026-0265 is an authentication bypass vulnerability in Palo Alto Networks PAN-OS when Cloud Authentication Service (CAS) is enabled, allowing an unauthenticated attacker with network access to bypass authentication controls, impacting confidentiality, integrity, and availability.

PAN-OS +3 authentication-bypass cve-2026-0265 network
2r 1t