CVE-2026-0259

Опубликовано: 13 мая 2026

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

The WildFire Appliance (WF-500, WF-500-B) software update is now available to customers that use the WildFire Appliance (WF-500, WF-500-B) for on-premise sandboxing.

Please note that customers using the WildFire Public cloud service are NOT impacted by this vulnerability.

Ссылки

https://security.paloaltonetworks.com/CVE-2026-0259
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия до 10.2.7 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 10.2.8 (включая) до 10.2.10 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 10.2.11 (включая) до 10.2.13 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 10.2.14 (включая) до 10.2.16 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h11:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h13:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h14:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h15:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h17:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h18:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h19:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h20:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h21:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h22:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h23:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h24:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h32:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h9:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h11:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h12:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h13:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h14:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h17:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h18:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h21:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h27:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h30:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h31:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h6:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h8:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h15:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h16:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h18:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h6:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.17:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h5:*:*:*:*:*:*

Одно из

cpe:2.3:h:paloaltonetworks:wf-500:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:wf-500-b:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 11.1.0 (включая) до 11.1.4 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 11.1.5 (включая) до 11.1.6 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 11.1.8 (включая) до 11.1.10 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 11.1.11 (включая) до 11.1.13 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h11:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h12:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h13:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h15:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h16:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h17:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h18:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h25:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h27:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h32:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h6:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h8:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h9:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h14:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h17:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h18:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h19:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h20:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h21:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h22:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h23:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h25:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h29:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h6:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h12:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h21:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h9:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.1.14:-:*:*:*:*:*:*

Одно из

cpe:2.3:h:paloaltonetworks:wf-500:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:wf-500-b:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

Одно из

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 11.2.0 (включая) до 11.2.4 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 11.2.5 (включая) до 11.2.7 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 11.2.8 (включая) до 11.2.10 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h11:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h12:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h14:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h15:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h6:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h8:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h9:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h10:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h11:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h12:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h7:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h8:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h1:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h3:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h4:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h5:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:11.2.11:-:*:*:*:*:*:*

Одно из

cpe:2.3:h:paloaltonetworks:wf-500:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:wf-500-b:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

Одно из

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 12.1.0 (включая) до 12.1.4 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 12.1.5 (включая) до 12.1.7 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:-:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h2:*:*:*:*:*:*

cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h3:*:*:*:*:*:*

Одно из

cpe:2.3:h:paloaltonetworks:wf-500:-:*:*:*:*:*:*:*

cpe:2.3:h:paloaltonetworks:wf-500-b:-:*:*:*:*:*:*:*

EPSS

Процентиль: 26%

0.00336

Низкий

8.8 High

CVSS3

Дефекты

CWE-73

Связанные уязвимости

GHSA-7g39-pmpc-x999

CVSS3: 8.8

github

3 месяца назад

An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables users to read sensitive information and delete arbitrary files. This vulnerability affects WF-500 and WF-500-B appliances running in the default non-FIPS configuration mode. The WildFire Appliance (WF-500, WF-500-B) software update is now available to customers that use the WildFire Appliance (WF-500, WF-500-B) for on-premise sandboxing. Please note that customers using the WildFire Public cloud service are NOT impacted by this vulnerability.

BDU:2026-07383

CVSS3: 7.1

fstec

3 месяца назад

Уязвимость микропрограммного обеспечения сетевых устройств WildFire WF-500 и WildFire WF-500-B, связанная с некорректным внешним управлением именем или путем файла, позволяющая нарушителю получить доступ на чтение, изменение и удаление файлов

EPSS

Процентиль: 26%

0.00336

Низкий

8.8 High

CVSS3

Дефекты

CWE-73