What it is about

PAN-OS ist das Betriebssystem der Sicherheitssysteme / Firewalls der Firma Palo Alto Networks. Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Palo Alto Networks PAN-OS ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.

Under what conditions?

Over the network and without logging in. This is the most dangerous combination: attackers can scan reachable devices automatically.

What can happen in the worst case

An attacker could use the vulnerability to

• beliebigen Programmcode mit Administratorrechten auszuführen

Am I affected?

Affected according to the BSI:

• Palo Alto Networks PAN-OS <12.1.4-h5
• Palo Alto Networks PAN-OS <12.1.7
• Palo Alto Networks PAN-OS <11.2.4-h17
• Palo Alto Networks PAN-OS <11.2.7-h13
• Palo Alto Networks PAN-OS <11.2.10-h6
• Palo Alto Networks PAN-OS <11.2.12
• Palo Alto Networks PAN-OS <11.1.4-h33
• Palo Alto Networks PAN-OS <11.1.6-h32
• Palo Alto Networks PAN-OS <11.1.7-h6
• Palo Alto Networks PAN-OS <11.1.10-h25
• Palo Alto Networks PAN-OS <11.1.13-h5
• Palo Alto Networks PAN-OS <11.1.15

and 6 more

The installed version is usually shown under “Help → About” or in the device’s admin interface.

What helps?

Update to at least:

• Palo Alto Networks PAN-OS 12.1.4-h5
• Palo Alto Networks PAN-OS 12.1.7
• Palo Alto Networks PAN-OS 11.2.4-h17
• Palo Alto Networks PAN-OS 11.2.7-h13
• Palo Alto Networks PAN-OS 11.2.10-h6
• Palo Alto Networks PAN-OS 11.2.12
• Palo Alto Networks PAN-OS 11.1.4-h33
• Palo Alto Networks PAN-OS 11.1.6-h32
• Palo Alto Networks PAN-OS 11.1.7-h6
• Palo Alto Networks PAN-OS 11.1.10-h25
• Palo Alto Networks PAN-OS 11.1.13-h5
• Palo Alto Networks PAN-OS 11.1.15

Is the vulnerability already being exploited?

• CVE-2026-0300: exploited in the wild according to CISA, in the catalogue since 06.05.2026.