Palo Alto Networks PAN-OS em sistemas de… · Disclosed

[Single source] Palo Alto patches remote command execution in PAN-OS

Nov 12, 2026 · 1 min read

According to @DarkWebInformer, Palo Alto Networks released updates for CVE-2026-0330, which allows authenticated administrators to execute arbitrary commands as root on Panorama systems. The post says there is no evidence of exploitation and recommends applying the patches and restricting management access to trusted internal networks.

By HIFY Radar newsroom Updated 11/12/2026 02:43 PM Get this every day →← Back to the feed 1 source

HighVulnerabilityDisclosedPatched

In 30 seconds

Alleged

A post by DarkWebInformer says Palo Alto Networks released patches for CVE-2026-0330, a PAN-OS vulnerability that could let authenticated administrators run arbitrary commands as root on Panorama management systems. The post reports no evidence of exploitation in the wild, but the supplied evidence does not independently confirm either the patches or that assessment.

What happened

Alleged

DarkWebInformer describes CVE-2026-0330 as a remote command-execution flaw affecting Panorama and says Palo Alto Networks has issued security updates. According to the post, exploitation requires authenticated administrator access and could elevate command execution to root privileges.

Why it matters

Inferred

If the description is accurate, the flaw is significant because Panorama is used to manage enterprise firewalls. Root-level command execution on that system could give an attacker broad control over the management environment and potentially put the managed infrastructure at risk.

What to do

Inferred

The post recommends applying Palo Alto Networks' patches and limiting management access to trusted internal networks. Because the supplied evidence contains no vendor advisory or release matrix, administrators should verify the correct update for their installed PAN-OS branch before deployment.

Confirmed and still uncertain

Alleged

The post identifies the issue as CVE-2026-0330, assigns it a CVSS score of 8.6 and says PAN-OS versions from 10.2 through 12.2 are affected. The evidence does not provide exact vulnerable builds, fixed versions, technical prerequisites beyond administrator authentication, or independent support for the claim that exploitation has not been observed.

What people are saying

Observed

DarkWebInformer characterizes the issue as a high-impact PAN-OS flaw and says successful exploitation could provide complete control of an affected Panorama system. No statement directly from Palo Alto Networks, a researcher or an affected organization appears in the supplied evidence.

Evolution

Alleged

The available account presents a short chain of events: a vulnerability was assigned CVE-2026-0330, Palo Alto Networks allegedly released security updates, and defenders were advised to patch and restrict management access. The evidence does not show when the flaw was discovered, reported or fixed, so a fuller timeline cannot be reconstructed.

Reach

Observed

1 independent groups, 1 updates, and 4 engagements.

Technical detail

Alleged

As described, CVE-2026-0330 is not an unauthenticated takeover path. It allegedly allows someone who already has authenticated administrator privileges to execute arbitrary operating-system commands as root, the highest privilege level, on an affected Panorama system. The supplied post does not explain the vulnerable component or exploitation method.

Sources and evidence

Observed

The evidence set contains one X post from DarkWebInformer and an accompanying image. It provides the CVE identifier, claimed severity, affected version range, impact, mitigation advice and exploitation-status claim, but includes no Palo Alto Networks advisory, CVE record or independent technical analysis to corroborate those details.