Skip to content
NewA calmer, faster ZeroHour
Vulnerability1

CVE-2026-0330

Authenticated root RCE in PAN-OS Panorama

CVSS 4.0
6.1 medium
EPSS
—
Published
·
Modified
Analyze CVE-2026-0330 with Vani AIImpact, affected versions, exploitation status, mitigations and detection
AI analysisSummaries by Vani AI

A code-injection flaw in Palo Alto Networks PAN-OS on Panorama lets an authenticated administrator with network access run arbitrary code as root. Cloud NGFW, Prisma Access, and standalone PAN-OS firewalls are not affected. Risk is much lower when the management interface is limited to trusted internal addresses. Palo Alto has not listed affected or fixed builds.

What to do: Apply Palo Alto Networks' update for CVE-2026-0330 when available. Restrict Panorama management access to trusted internal IP addresses.

ProductAffected
Palo Alto Networks PAN-OS on Panorama—
Estimated exposure
nicheNo basis for an estimate.

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description · NVD

A remote code execution (RCE) vulnerability in Palo Alto Networks PAN-OS® software on Panorama enables an authenticated administrator with network access to execute arbitrary code with root privileges. The security risk posed by this issue is significantly minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Cloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability.

Weakness
CWE-94
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:X/RE:M/U:Amber
NVD CVE.org GitHub PoCs EPSS (—)

In the news

2 stories