Threats Tagged 'cve-2026-0320'

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured with a Luna Hardware Security Module (HSM). The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. Panorama, Cloud NGFW, and Prisma® Access are not impacted by this vulnerability.

CVE-2026-0320 is a command injection vulnerability in Palo Alto Networks PAN-OS software that allows an authenticated administrator to execute arbitrary commands as root. Exploitation requires access to the PAN-OS management interface. The vulnerability affects PA-Series and VM-Series firewalls and Panorama (virtual and M-Series), but not Cloud NGFW or Prisma Access. Restricting management interface access to trusted internal IP addresses significantly reduces risk. The vulnerability has a medium severity with a CVSS 4.0 score of 6.1.