CVE-2026-0261 PAN-OS_ Authenticated Admin Command Injection Vulnerability

[K.Kanbayashi]

Attention: Global TPM team,

In the Security Advisory referenced in the subject, is it correct to understand that the behavior of the vulnerability exploitation by an authenticated administrator does not differ depending on the assigned role?
Or does the behavior vary depending on the role of the authenticated administrator?

[SutareMayur]

Hi @K.Kanbayashi 

Based on the advisory, the CVE applies to an authenticated administrator who have access to PANOS CLI or GUI and it does not specify exploitation based on the administrator role.

However, I would welcome any additional insights or clarification from the experts here.