This vulnerability (CVE-2026-0282) involves improper input validation (CWE-20) in Palo Alto Networks PAN-OS software, which enables unauthenticated attackers with network access to the management web interface to delete files from a temporary directory. It affects PA-Series and VM-Series firewalls and Panorama (virtual and M-Series) but does not affect Cloud NGFW or Prisma Access. The vulnerability has a CVSS 4.0 base score of 2.7, indicating low severity. No official remediation or patch information is provided, and no known exploits are reported in the wild. Palo Alto Networks recommends restricting management interface access to trusted internal IP addresses to minimize risk.

An unauthenticated attacker with network access to the management web interface can delete files from a temporary directory, which could potentially disrupt management operations. However, the impact is limited by the requirement for network access to the management interface and the low CVSS score. Cloud NGFW and Prisma Access are not affected.

No official patch or remediation level has been published yet. Palo Alto Networks recommends following best practice deployment guidelines by restricting access to the management web interface to trusted internal IP addresses to minimize exposure. Users should monitor the vendor advisory for updates on patches or official fixes.