Improper input validation in Palo Alto Networks Cloud Ngfw
CVE-2026-0282
A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to delete files from a temporary directory. The security risk posed by this issue is minimized by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L.
EPSS exploit prediction
EPSS: 0.003 (20.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 20th percentile — 20.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- Palo Alto Networks Cloud Ngfw — versions All
- Palo Alto Networks Pan-Os — versions 12.1.0, 11.2.0, 11.1.0
- Palo Alto Networks Prisma Access — versions All
- Paloaltonetworks Pan-Os
Weakness classification (CWE)
References
- security.paloaltonetworks.com/CVE-2026-0282 (vendor-advisory, Vendor Advisory)
- 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Frequently asked questions
- What is CVE-2026-0282?
- CVE-2026-0282 is a medium-severity vulnerability in Palo Alto Networks Cloud Ngfw, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2026-07-09.
- How severe is CVE-2026-0282?
- Medium severity. CVSS v3 base score is 6.5 out of 10.