CVE-2026-0320

Executive Summary

CVE-2026-0320 is a command injection vulnerability (CWE-78) in Palo Alto Networks PAN-OS software that allows an authenticated administrator to bypass system restrictions and execute arbitrary commands with root privileges. The vulnerability is exploitable only by a user who already possesses authenticated access to the PAN-OS management interface, affecting PA-Series and VM-Series firewalls as well as Panorama (virtual and M-Series). Cloud NGFW and Prisma Access are explicitly unaffected. No public exploit code, PoC, or Nuclei template is currently available, and the vulnerability is not listed in CISA KEV.

Technical Analysis

CVE-2026-0320 is classified as an OS Command Injection (CWE-78). The root weakness is that the affected PAN-OS software fails to properly neutralize special elements used in an OS command, allowing an authenticated administrator to break out of the intended command context and inject arbitrary operating system commands that execute as root.

The attack surface is the PAN-OS management interface. Per the vendor description, exploitation requires two preconditions:

1. The attacker must hold a valid authenticated administrator session on the management interface.
2. The attacker must have network reachability to that interface.

Because the vulnerable component is reachable only via the management plane (not the data plane), the practical exposure depends entirely on how the management interface is segmented. Palo Alto Networks explicitly notes that the risk is "significantly minimized by restricting access to the management interface to only trusted internal IP addresses," consistent with their management-access hardening guidance.

Affected platforms:

• PA-Series hardware firewalls
• VM-Series virtual firewalls
• Panorama (virtual and M-Series)

Unaffected platforms:

• Cloud NGFW
• Prisma Access

No CVSS vector was provided by the source data; the vector listed in METADATA is an inferred representation of the described impact (network-reachable management interface, high privileges required, high confidentiality/integrity/availability impact) and should not be treated as an authoritative vendor-published score. The NVD entry lists the CVSS score as N/A.

The specific injection point (the exact CLI command, API endpoint, or configuration field that fails to sanitize input) is not disclosed in the available NVD description. Because that level of detail is absent, this report does not speculate on function names, parameter names, or endpoints. The vulnerability class — authenticated command injection leading to root — is sufficient to characterize the exploit primitive: an already-privileged administrative user escalates from the application's restricted admin context to full OS-level root control of the firewall.

Exploitation Scenarios

No public PoC or exploit code is available. The following attack chain is inferred strictly from the vulnerability class (CWE-78 command injection requiring an authenticated management-interface session) and does not assume any undisclosed implementation detail.

1. Reconnaissance / target identification An adversary first identifies internet- or internal-network-reachable PAN-OS management interfaces. This is typically accomplished via scanning for exposed management portals. In many real-world deployments, management interfaces are mistakenly exposed to untrusted networks — which is precisely why the vendor emphasizes restricting management access to trusted internal IPs. In a targeted scenario, the attacker may already hold credentials obtained through prior phishing, credential stuffing, or reuse of compromised administrative accounts.

2. Triggering the flaw class Having authenticated to the management interface with administrator privileges, the attacker interacts with the vulnerable functionality. Because the flaw is an OS command injection, the trigger involves supplying crafted input containing OS command metacharacters through the affected administrative function. The intended restriction — that the administrator is confined to a limited command set or application context — is not enforced because the input is not properly neutralized before being passed to the underlying OS.

3. Execution method (vulnerability-class level) Injected shell metacharacters cause the underlying operating system to interpret part of the supplied input as a separate command. The command executes with the privileges of the vulnerable process — root, per the vendor description — granting the attacker arbitrary command execution as root despite being nominally a restricted administrator.

4. Post-exploitation impact Successful exploitation yields root-level command execution on the firewall or Panorama appliance. From there, an attacker can read and modify configuration, potentially extract credentials and keys, alter firewall policy, disable logging, pivot into the internal network, or establish persistence. Because the device sits at a trust boundary, root compromise of a firewall has severe downstream consequences for the entire protected environment.

Impact Assessment

• Confidentiality: High — root access exposes configuration, secrets, certificates, and potentially traffic-handling capabilities.
• Integrity: High — an attacker with root can modify firewall rules, routing, and security controls, undermining the entire security posture.
• Availability: High — root-level control permits disabling services, crashing processes, or bricking the appliance.

Blast radius: every organization running affected PAN-OS on PA-Series, VM-Series, or Panorama. Critically, the "authenticated administrator" precondition reduces the unauthenticated attack surface, but it does NOT eliminate risk in the following cases:

• Management interfaces exposed to untrusted networks (misconfiguration).
• Insider threat or compromised administrative credentials.
• Environments where admin accounts are over-provisioned or credentials are shared.
• Post-exploitation chaining: an attacker who already compromised an admin account can now escalate from application-level admin to full root on the security device itself.

EPSS score is 0.00842 (57.1st percentile), indicating a low near-term exploitation probability relative to all scored CVEs, though this may rise if a public exploit emerges. The CVE is NOT in CISA KEV, and no exploit code, PoC, or Nuclei template exists at the time of writing.

Detection Guidance

Sigma Rule

title: Potential PAN-OS Authenticated Command Injection (CVE-2026-0320)
id: 9f1c2a74-0320-4b6e-9c1a-panos-cmdinj
status: experimental
description: Detects suspicious command execution or shell metacharacter usage during
  authenticated administrative activity on PAN-OS management interfaces.
references:
  - https://nvd.nist.gov/vuln/detail/CVE-2026-0320
author: Threat Intelligence
date: 2026/01/01
logsource:
  product: panos
  service: management
detection:
  selection_metachars:
    command|contains:
      - ';'
      - '|'
      - '&&'
      - '$('
      - '`'
      - '>'
      - '<'
  selection_admin:
    user_type: 'admin'
  condition: selection_admin and selection_metachars
falsepositives:
  - Legitimate administrative use of shell syntax in constrained contexts
level: high
tags:
  - attack.t1190
  - cve.2026.0320

YARA Rule

rule CVE_2026_0320_PANOS_CMD_INJECTION_ARTIFACT
{
    meta:
        description = "Detects OS command injection artifacts related to CVE-2026-0320 in PAN-OS management activity"
        author = "Threat Intelligence"
        reference = "https://nvd.nist.gov/vuln/detail/CVE-2026-0320"
        date = "2026-01-01"
        severity = "high"
    strings:
        $s1 = "CVE-2026-0320" ascii wide
        $s2 = "PAN-OS" ascii wide nocase
        $cmd1 = "/bin/sh -c" ascii
        $cmd2 = ";id;" ascii
        $cmd3 = "&& whoami" ascii
    condition:
        ($s1 or $s2) and any of ($cmd*)
}

Suricata IDS Rule

alert http $HOME_NET any -> $HOME_NET any (msg:"CVE-2026-0320 PAN-OS Authenticated Command Injection Attempt"; flow:established,to_server; http.method; content:"POST"; http.uri; content:"/api/"; nocase; http.request_body; content:"|3b|"; content:"id"; nocase; distance:0; content:"|26|"; nocase; reference:cve,2026-0320; reference:url,nvd.nist.gov/vuln/detail/CVE-2026-0320; classtype:web-application-attack; sid:2026032001; rev:1;)

Elastic Detection

sequence by user.name with maxspan=30s
  [ authentication where event.outcome == "success" and user.target.domain == "panos" ]
  [ process where process.parent.name : "*" and process.name in ("sh","bash","cmd.exe") and
    process.command_line : ("*;*", "*|*", "*&&*", "*$(*", "*`*") ]

Splunk SPL Query

index=panos sourcetype=panos:management OR sourcetype=panos:config
| search (command="*;*" OR command="*|*" OR command="*&&*" OR command="*$(*" OR command="*`*")
| stats count min(_time) as first_seen max(_time) as last_seen by host, user, command
| where count > 0
| convert ctime(first_seen) ctime(last_seen)

Wazuh OSSEC Rule

<group name="panos,cve-2026-0320,">
  <rule id="100320" level="12">
    <decoded_as>json</decoded_as>
    <field name="product">PAN-OS</field>
    <field name="command" type="pcre2">[;&|`]|\$\(</field>
    <description>CVE-2026-0320: Possible PAN-OS authenticated command injection detected</description>
    <mitre>
      <id>T1190</id>
    </mitre>
  </rule>
</group>

Mitigation & Patch Guidance

Patch confidence: 0/4 (UNPATCHED — no patch evidence from any tracked source). Affected version ranges, vendor fix versions, and official workarounds were not provided in the source data. Verify the current status directly with Palo Alto Networks advisories, as patch information may be published after this report.

1. Immediate mitigations

• Restrict access to the PAN-OS management interface to trusted internal IP addresses only, in line with Palo Alto Networks' management-access hardening guidance. This is the single most effective control because exploitation requires management-interface reachability.
• Never expose the management interface directly to the internet or untrusted networks.
• Enforce least privilege on administrator accounts; eliminate shared or over-provisioned admin credentials.
• Enable multi-factor authentication for all administrative access.
• Audit recent administrative sessions and configuration changes for signs of abuse.
• Apply strict segmentation so that the management plane is isolated from the data plane and from lateral movement.

2. Patch / upgrade steps

• Monitor Palo Alto Networks security advisories for CVE-2026-0320 for an official fix and affected version list.
• Once a fixed PAN-OS release is available, upgrade PA-Series, VM-Series, and Panorama (virtual and M-Series) appliances in accordance with the vendor advisory.
• Confirm that Cloud NGFW and Prisma Access environments require no action (vendor states they are not affected).

3. Long-term hardening

• Adopt a formal management-access policy restricting all administrative interfaces to hardened jump hosts.
• Continuously monitor administrator actions for anomalous privilege escalation to root.
• Rotate administrative credentials and keys regularly.
• Integrate firewall logs into a SIEM with detections for command injection metacharacters and unexpected root-level activity.
• Maintain a rapid patch cadence for perimeter security devices.

References

• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-0320
• Palo Alto Networks Security Advisories: https://security.paloaltonetworks.com/
• Palo Alto Networks management-access hardening guidance: https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431
• MITRE ATT&CK T1190 — Exploit Public-Facing Application: https://attack.mitre.org/techniques/T1190/
• CWE-78 — Improper Neutralization of Special Elements used in an OS Command: https://cwe.mitre.org/data/definitions/78.html

Threat actor campaign data and exploit-in-the-wild evidence: none available at the time of writing. CVE-2026-0320 is not listed in CISA KEV, and no public PoC or exploit code has been identified.