CVE-2026-0273

CVE-2026-0273 describes a command injection vulnerability found in Palo Alto Networks PAN-OS® software. This flaw permits an authenticated administrator to circumvent system restrictions and execute arbitrary commands with root privileges. The vulnerability impacts PAN-OS software on PA-Series and VM-Series firewalls, as well as Panorama (virtual and M-Series) appliances. To exploit this issue, an administrator must possess access to either the PAN-OS Command Line Interface (CLI) or the Web User Interface (Web UI). The security risk associated with this vulnerability is considerably mitigated when CLI access is restricted to a limited group of administrators and when access to the management web interface is confined to trusted internal IP addresses, adhering to recommended deployment guidelines. Cloud NGFW and Prisma® Access products are not affected by this vulnerability.