CVE-2026-0330 · Infrastructure
NO FIX YET
A flaw in Palo Alto Networks PAN-OS on Panorama lets an authenticated administrator with network access run arbitrary code with root privileges. Restricting management interface access to trusted internal addresses significantly reduces the risk, according to the vendor.
first public Nov 11, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organizations running Palo Alto Networks Panorama with PAN-OS. The vendor states Cloud NGFW, Prisma Access and standalone PAN-OS firewalls are not affected. Exposure depends on who can reach the management interface and hold administrator credentials; the vendor says restricting management access to trusted internal addresses significantly minimizes the risk.
Not affected if cloud-ngfw, management-interface-restricted, prisma-access, standalone-pan-os-firewall
Who cares firewall, palo-alto-networks, pan-os, panorama
Unknown from the sources.
A remote code execution (RCE) vulnerability in Palo Alto Networks PAN-OS® software on Panorama enables an authenticated administrator with network access to execute arbitrary code with root privileges.
The security risk posed by this issue is significantly minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .
Cloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:X/RE:M/U:Amber
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.