This vulnerability (CVE-2026-0286) in Palo Alto Networks PAN-OS software enables an authenticated administrator to perform command injection on the management plane, resulting in arbitrary OS command execution with root privileges. It affects physical and virtual firewall appliances and Panorama management platforms but excludes cloud-based NGFW and Prisma Access services. The vulnerability is classified under CWE-78 (Improper Neutralization of Special Elements used in an OS Command). The CVSS 3.1 base score is 7.2, indicating a moderate severity with network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

An authenticated administrator can execute arbitrary OS commands as root on affected PAN-OS devices, potentially leading to full system compromise. This could impact the confidentiality, integrity, and availability of the firewall or management system. However, the risk is mitigated when CLI access is tightly controlled and limited to trusted administrators. Cloud-based Palo Alto Networks services such as Cloud NGFW and Prisma Access are not affected.

No explicit patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Restrict CLI access to a limited group of trusted administrators to significantly reduce the risk posed by this vulnerability. Monitor Palo Alto Networks advisories for updates on patches or official mitigations.