Palo Alto patches PAN-OS Panorama code-injection flaw CVE-2026-0330
November 12: reports name researcher Daniel Voce, list hotfix versions, and detail Threat IDs 510045 and 510048, which require SSL Decryption.
Palo Alto has patched authenticated root code injection in PAN-OS on Panorama and says it knows of no attacks.
Palo Alto Networks disclosed CVE-2026-0330, a CWE-94 code-injection flaw in PAN-OS running on Panorama. An authenticated administrator with network access can execute arbitrary code with root privileges; no special configuration or user interaction is required. The vendor rates it medium severity, with a CVSS base score of 8.6 and a threat score of 6.1, and says it is not aware of malicious exploitation. Cloud NGFW, Prisma Access, and standalone firewalls are unaffected. Fixes were published on November 11, 2026, across several PAN-OS branches; there is no workaround, though restricting management access and optional Threat Prevention signatures can reduce exposure.
- Patched lines include 12.2.4-h2, 12.1.10-h4, 11.2.16-h2, 11.1.16-h5, and 10.2.18-h14.
- Earlier 12.1, 11.2, 11.1, and 10.2 maintenance releases also have hotfixes.
- Vendor credits internal researcher Daniel Voce.
- Threat IDs 510045 and 510048 in content 9171-10349 and later need SSL Decryption.
- Unsupported releases require migration to supported, fixed software.
Timeline
dated events in the reporting · oldest first- Nov 11, 2026Palo Alto published fixes for CVE-2026-0330. · GBHackers
What each outlet adds
beyond the shared facts- Cyber Security NewsNames Daniel Voce and lists specific patched PAN-OS hotfix versions.
- GBHackersGives Threat IDs 510045 and 510048 and the content release.
- CVEs
- CVE-2026-0330
- Vendors
- Palo Alto Networks
Coverage
oldest first · one row per article · UTC- · 17h ago
Cyber Security NewsFirst report
PAN-OS Panorama flaw lets admins run code as root (CVE-2026-0330)
Palo Alto rates it medium, knows of no attacks, and says Cloud NGFW, Prisma Access, and standalone firewalls are unaffected.
- · 15h ago
GBHackers
Palo Alto patches Panorama PAN-OS root code injection CVE-2026-0330
The authenticated flaw affects Panorama on five PAN-OS branches; firewalls, Cloud NGFW, and Prisma Access are unaffected.
Vulnerabilities in this story
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-0330 | Authenticated root RCE in PAN-OS Panorama | 6.1 | — |