CVE-2026-0286— PAN-OS: Authenticated Command Injection in CLI
Affected Version Matrix 6
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Palo Alto Networks | Cloud NGFW | All | unaffected |
| Palo Alto Networks | PAN-OS | 12.1.0< 12.1.8 | affected |
11.2.0< 11.2.13 | affected | ||
11.1.0< 11.1.16 | affected | ||
10.2.0< 10.2.18-h8 | affected | ||
| Palo Alto Networks | Prisma Access | All | unaffected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-0286
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PAN-OS: Authenticated Command Injection in CLI
Source: NVD (National Vulnerability Database)
Vulnerability Description
A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma Access® are not impacted by this vulnerability.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Palo Alto Networks | Cloud NGFW | - | - | |
| Palo Alto Networks | PAN-OS | 12.1.0 ~ 12.1.8 | cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:-:*:*:*:*:*:* | |
| Palo Alto Networks | Prisma Access | - | - |
II. Public POCs for CVE-2026-0286
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-0286
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-0286 (1)
Same Patch Batch · Palo Alto Networks · 2026-07-09 · 13 CVEs total
| CVE-2026-0275 | Prisma Browser: Local Privilege Escalation on macOS | |
| CVE-2026-0276 | Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability | |
| CVE-2026-0277 | Prisma Access Agent: Improper Certificate Validation on iOS | |
| CVE-2026-0278 | Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows | |
| CVE-2026-0279 | PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities | |
| CVE-2026-0280 | PAN-OS: IPv6 Firewall Policy Bypass | |
| CVE-2026-0281 | PAN-OS: Information Disclosure Vulnerability in Management Web Interface | |
| CVE-2026-0282 | PAN-OS: File Deletion Vulnerability in Management Web Interface | |
| CVE-2026-0283 | PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN) | |
| CVE-2026-0284 | PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN) | |
| CVE-2026-0285 | PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface | |
| CVE-2026-0287 | PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing |
IV. Related Vulnerabilities
Same product: Cloud NGFW
- CVE-2026-0279
PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities - CVE-2026-0280
PAN-OS: IPv6 Firewall Policy Bypass - CVE-2026-0281
PAN-OS: Information Disclosure Vulnerability in Management W - CVE-2026-0282
PAN-OS: File Deletion Vulnerability in Management Web Interf - CVE-2026-0283
PAN-OS: Authentication Bypass Vulnerability in Large Scale V
Same vendor: Palo Alto Networks
- CVE-2026-0275
Prisma Browser: Local Privilege Escalation on macOS - CVE-2026-0276
Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerabilit - CVE-2026-0277
Prisma Access Agent: Improper Certificate Validation on iOS - CVE-2026-0278
Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilit - CVE-2026-0279
PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities
Same weakness: CWE-78
- CVE-2025-30007
HestiaCP < 1.9.5 Authenticated OS Command Injection via DNS - CVE-2026-54149
MaxKB MCP tool import validation bypass allows post-authenti - CVE-2026-61434
PraisonAI before 4.6.78 Allowlist Bypass via find -exec - CVE-2026-56688
Dell PowerFlex Manager <5.1.0.1 OS命令注入漏洞 - CVE-2026-41880
OS Command Injection in R-SOFT DMS
V. Comments for CVE-2026-0286
No comments yet