CVE-2026-0282— PAN-OS管理Web界面文件删除漏洞
Affected Version Matrix 6
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Palo Alto Networks | Cloud NGFW | All | unaffected |
| Palo Alto Networks | PAN-OS | 12.1.0< 12.1.8 | affected |
11.2.0< 11.2.13 | affected | ||
11.1.0< 11.1.16 | affected | ||
10.2.0< 10.2.18-h8 | affected | ||
| Palo Alto Networks | Prisma Access | All | unaffected |
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-0282の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
PAN-OS: File Deletion Vulnerability in Management Web Interface
ソース: NVD (National Vulnerability Database)
脆弱性説明
A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to delete files from a temporary directory. The security risk posed by this issue is minimized by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
输入验证不恰当
ソース: NVD (National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Palo Alto Networks | Cloud NGFW | - | - | |
| Palo Alto Networks | PAN-OS | 12.1.0 ~ 12.1.8 | cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:* | |
| Palo Alto Networks | Prisma Access | - | - |
II. CVE-2026-0282の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-0282のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-0282 厂商安全公告 (1)
Same Patch Batch · Palo Alto Networks · 2026-07-09 · 13 CVEs total
| CVE-2026-0275 | Prisma Browser: Local Privilege Escalation on macOS | |
| CVE-2026-0276 | Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability | |
| CVE-2026-0277 | Prisma Access Agent: Improper Certificate Validation on iOS | |
| CVE-2026-0278 | Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows | |
| CVE-2026-0279 | PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities | |
| CVE-2026-0280 | PAN-OS: IPv6 Firewall Policy Bypass | |
| CVE-2026-0281 | PAN-OS: Information Disclosure Vulnerability in Management Web Interface | |
| CVE-2026-0283 | PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) | |
| CVE-2026-0284 | PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN) | |
| CVE-2026-0285 | PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface | |
| CVE-2026-0286 | PAN-OS: Authenticated Command Injection in CLI | |
| CVE-2026-0287 | PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing |
IV. 関連脆弱性
同じ製品: Cloud NGFW
- CVE-2026-0279
PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities - CVE-2026-0280
PAN-OS: IPv6 Firewall Policy Bypass - CVE-2026-0281
PAN-OS: Information Disclosure Vulnerability in Management W - CVE-2026-0283
PAN-OS: Authentication Bypass Vulnerability in Large Scale V - CVE-2026-0284
PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVP
同じベンダー: Palo Alto Networks
- CVE-2026-0275
Prisma Browser: Local Privilege Escalation on macOS - CVE-2026-0276
Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerabilit - CVE-2026-0277
Prisma Access Agent: Improper Certificate Validation on iOS - CVE-2026-0278
Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilit - CVE-2026-0279
PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities
V. CVE-2026-0282へのコメント
まだコメントはありません