Palo Alto PAN-OS CVE-2026-0282 Unauthenticated File Deletion Vulnerability Advisory

Vulnerability Overview Vulnerability Name: CVE-2026-0282 Vulnerability Type: File Deletion Affected Product: Palo Alto Networks PAN-OS Software Description: This vulnerability allows an unauthenticated attacker to access the management web interface over the network to delete files from the temporary directory. Severity: Low Urgency: Medium Affected Versions Affected Versions: - Cloud NGFW: None - PAN-OS 12.1: = 12.1.8 - PAN-OS 11.2: >= 11.2.13 - PAN-OS 11.1: >= 11.1.16 - PAN-OS 10.2: None - Prisma Access: All versions Remediation PAN-OS 12.1: Upgrade to version 12.1.8 or later PAN-OS 11.2: Upgrade to version 11.2.13 or later PAN-OS 11.1: Upgrade to version 11.1.16 or later PAN-OS 10.2: Upgrade to version 11.1.16, 11.2.13, or 12.1.8 or later All older unsupported PAN-OS versions: Upgrade to a supported fixed version Prisma Access: No action required Other Information Attack Vector: Network Attack Complexity: Low Attack Requirements: None Automation: No User Interaction: None Confidentiality Impact: None Integrity Impact: Low Availability Impact: Low Privilege Requirements: None Subsequent Confidentiality Impact: None Subsequent Integrity Impact: None Subsequent Availability Impact: None Timeline Initial Release: 2026-07-09 Update: 2026-07-09 Discovery Internal Discovery: Yes References Palo Alto Networks LIVEcommunity Article: Link Palo Alto Networks Official and Technical Documentation: Link Acknowledgements Palo Alto Networks thanks its internal security research team for discovering and reporting this issue. CPEs cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:** cpe:2.3:o:palo_alto_networks:pan-os:12.1.6: cpe:2.3:o:palo_alto_networks:pan-os:12.1.5: cpe:2.3:o:palo_alto_networks:pan-os:12.1.4: cpe:2.3:o:palo_alto_networks:pan-os:12.1.3: cpe:2.3:o:palo_alto_networks:pan-os:12.1.2: cpe:2.3:o:palo_alto_networks:pan-os:11.2.12: cpe:2.3:o:palo_alto_networks:pan-os:11.2.11: cpe:2.3:o:palo_alto_networks:pan-os:11.2.10: cpe:2.3:o:palo_alto_networks:pan-os:11.2.9: CPE Applicability cpe:2.3:o:palo_alto_networks:pan-os: is vulnerable from (inclusive) 12.1.0 to (exclusive) 12.1.8 OR cpe:2.3:o:palo_alto_networks:pan-os: is vulnerable from (inclusive) 11.2.0 to (exclusive) 11.2.13 OR cpe:2.3:o:palo_alto_networks:pan-os: is vulnerable from (inclusive) 11.1.0 to (exclusive) 11.1.16 OR cpe:2.3:o:palo_alto_networks:pan-os: is vulnerable from (inclusive) 10.2.0 Timeline 2026-07-09 Initial Release --- Note**: POC code or exploit code is not included in this document.

Goal Reached Thanks to every supporter — we hit 100%!

Palo Alto PAN-OS CVE-2026-0282 Unauthenticated File Deletion Vulnerability Advisory