Palo Alto PAN-OS Flaw Lets Attackers Run Arbitrary Commands With Root Privileges

Palo Alto Networks released patches for three PAN‑OS vulnerabilities (CVE‑2026‑0273, CVE‑2026‑0272, CVE‑2026‑0269) affecting PA‑Series, VM‑Series and Panorama: a command injection via CLI/web UI and a CLI privilege escalation that can lead to root access, and a tunnel-processing memory corruption that can cause reboots/DoS. All are rated MEDIUM, require authenticated access (the DoS requires IPSec/GlobalProtect configurations), no active in‑the‑wild exploitation is reported, and administrators are advised to apply the listed fixed releases and harden management-plane access.