Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fhqp-fjgf-qf28

Опубликовано: 09 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6
CVSS3: 7.2

Описание

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root.

The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators.

This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).

Cloud NGFW and Prisma Access® are not impacted by this vulnerability.

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root.

The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators.

This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).

Cloud NGFW and Prisma Access® are not impacted by this vulnerability.

EPSS

Процентиль: 69%
0.014
Низкий

6 Medium

CVSS4

7.2 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7.2
nvd
24 дня назад

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma Access® are not impacted by this vulnerability.

CVSS3: 6.5
fstec
26 дней назад

Уязвимость интерфейса командной строки операционной системы PAN-OS, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 69%
0.014
Низкий

6 Medium

CVSS4

7.2 High

CVSS3

Дефекты

CWE-78