topic Re: CVE-2026-0261 PAN-OS_ Authenticated Admin Command Injection Vulnerability in Next-Generation Firewall Discussions

CVE-2026-0261 PAN-OS_ Authenticated Admin Command Injection Vulnerability

K.Kanbayashi — Mon, 25 May 2026 07:57:13 GMT

Attention: Global TPM team,

In the Security Advisory referenced in the subject, is it correct to understand that the behavior of the vulnerability exploitation by an authenticated administrator does not differ depending on the assigned role?
Or does the behavior vary depending on the role of the authenticated administrator?

Re: CVE-2026-0261 PAN-OS_ Authenticated Admin Command Injection Vulnerability

SutareMayur — Tue, 18 Aug 2026 07:34:01 GMT

Hi @K.Kanbayashi

Based on the advisory, the CVE applies to an authenticated administrator who have access to PANOS CLI or GUI and it does not specify exploitation based on the administrator role.

However, I would welcome any additional insights or clarification from the experts here.